I fixed the problem by installing our wildcard certificate on the server that resolves to acadiau.ca (www.acadiau.ca). For some reason Entourage is looking at acadiau.ca and didn't like not finding a cert there...
From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: June-14-10 4:09 PM To: MS-Exchange Admin Issues Subject: RE: Problems with Entourage after migration I presume that by "WSE" they mean "EWS". It sounds to me as if the MACs don't have the _root certificate_ installed for the certificate. That is, they are attempting to validate the SSL chain from certificate to root and a piece is missing. Unless you turn it on (off by default), most browsers won't do root investigation like that. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Paul Steele [mailto:paul.ste...@acadiau.ca] Sent: Monday, June 14, 2010 2:17 PM To: MS-Exchange Admin Issues Subject: Problems with Entourage after migration I'm passing this information on from our Helpdesk. I don't use Macs but I'm trying to help them with our Exchange 2010 migration. --- During migration testing from Exchange server 2003 to 2010 we discovered problems with our Mac Entourage 2008 users. While using Mac Office 12.2.4 and Entourage WSE version 13.0.4 we were getting a prompt regarding a certificate not being installed. While this error was unsolved it would only prompt during the first boot of Entourage and then never return during our testing. As of last week the update to Office 12.2.5 forced us to install the WSE version 13.0.5 in order to get through the installer. However the certificate error now occurs every time they open Entourage. The exact error message is "unable to establist a secure connection to acadiau.ca because the correct root certificate is not installed". After clicking ok on the error box Entourage does continue to load and appears to run correctly. We have a Digicert UC cert installed on our exchange server and the domain names in the cert appear to match what client have entered in their Entourage account information. "acadiau.ca" does not appear in the cert (and shouldn't) and it's not clear why Entourage is complaining about it. OWA (in Safari) works fine. The upgrade to Entourage WSE is not going to be easy because the WSE version and Office version must match to get it installed correctly. Office 12.2.3 needed WSE 13.0.3 to install correctly. Office 12.2.4 needed WSE 13.0.4 to install correctly. Office 12.2.5 appears to need WSE 13.0.5 to install correctly. Microsoft's site today listed 13.0.0 as the current download which should be older, although we found 13.0.5 on a random website and used it as 13.0.0 will not install since it's actually older than the Entourage version most users are running. Has anyone has similar problems with certificates with Entourage WSE? Any suggestions would be greatly appreciated.
