Exchange 2016

[mtillbrook]

Ok so I've just installed Exchange 2016 for a customer as they need to upgrade from Exch2010 but aren't keen on O365 (for some reason!)

Installation went smoothly and I was able to logon to the ECP afterwards (only with IE, not Chrome) however, the server (Server 2016) then decided to do some more updates and now I have an issue.

 

"Turn on TLS 1.0, TLS 1.1 and TLS 1.2 in Advanced settings and try connecting to https://exch01 again. If this error persists, it is possible that this site uses an unsupported protocol or cipher suite such as RC4 (link for the details), which is not considered secure. Please contact your site administrator."

 

I get this with IE both trying locally or remotely when trying to access the ECP. I'm guessing there may well be something in IIS that I can switch off but I'm basically at a loss at the moment!

 

Any clues?

[mtillbrook]

Ok, panic over - I've fixed it myself.

 

Basically, I've used the Exchange Management Shell to install a certificate and set it to be used to IIS. Previous to this, I hadn't got to the point of installing a certificate on the server as I hadn't finsihed commisioning the new exchange server. With the cert installed, I still get the normal cert warning in IIS but it does then get me to the logon screen.

 

UPDATE:

 

Just in case anyone else gets this issue, its one to do with Exchange 2016 on Windows Server 2016 and IIS10.

Have a look at http://www.tecfused.com/2016/10/err_spdy_inadequate_transport_security-server-2016/

 

It explains it well and give a nice easy solution!

Edited June 19, 2017 by mtillbrook
Futher info!