Exchange 2007 SSL - internal problem

[burgemaster]

THINK I NEED AN EXCHANGE EXPERT ON THIS ONE !!!

 

Hi,

We have recently been trying to get "Outlook anywhere" working, previously Exchange 2007 internally and webmail from home has been working perfectly...

 

But today after changing the "autodiscover" ip address in DNS, autodiscover seemed to start working..... BUT

 

Now internally when anyone opens outlook they get the SSL certificate error:

 

http://img354.imageshack.us/img354/8181/sslerrorxp5.jpg

 

"The name of the security certificate is invalid or does not match the name of the site"

 

We changed back what we had done and autodiscover still seems to work, but the SSL error hasnt gone away and wont !!!!

 

In our certificate you can see we have:

webmail.domain.sch.uk and autodiscover.domain.sch.uk....

 

Our mail server is called MAIL and the internalurl points to:

 

http://img230.imageshack.us/img230/9425/setupml2.jpg

 

Should we also have "mail.domain.sch.uk" in our SSL certificate?

its too late now and would cost another 700quid !

 

But i cant work out why it was working fine before and now the error pops up?

 

Can an exchange expert please help or suggest something?

 

Weve tried reading through

http://support.microsoft.com/kb/940726

but this looks too me like it is aimed at people who have their new SSL certificate and need to change the location of there URL`s to match the SSL instead of the exchange default, which is the FQDN.....

 

Could it be as simple as us changing our internalurl to webmail.domain.sch.uk?

 

Cheers in advance

Edited May 7, 2008 by burgemaster

[SYNACK]

Could it be that the server still has a DNS entry cached for that name that does not match up to your new ip address. Have you tried creating a new certificate for it if its an internal cert server?

[burgemaster]

Hi there,

Its a purchased certificate that cant be changed..

DNS has the correct ip in the entry...

 

It lookslike M$ in that link are having:

 

The Service Connection Point object for the Autodiscover service

The InternalUrl attribute of Exchange 2007 Web Service (EWS)

The InternalUrl attribute of the Offline Address Book Web service

The InternalUrl attribute of the Exchange unified messaging (UM) Web service

 

All point to the same location? in there case: mail.contoso.com

we have webmail.domain.com on our cert so i might try and change them all to the same... currently some are mail.xxxxx some are webmail.xxxx

 

[SYNACK]

Sounds like a good plan, if it is switching between the roles during logon or something that could cause those kinds of errors.