RE: Problems with Entourage after migration
This is a known issue with some Digicert certificates. Check on the DIgicert website or talk to support for the fix. There's an intermediate certificate you need to install on the server IIRC from my Experience with 2007 SP1 from about a year and a half ago. Regards [cid:image001.jpg@01CB0C73.07EB61F0] Peter Johnson I.T Architect United Kingdom: +44 1285 658542 South Africa: +27 11 252 1100 Swaziland: +268 442 7000 Fax:+27 11 974 7130 Mobile: +2783 306 0019 peter.john...@peterstow.com This email message (including attachments) contains information which may be confidential and/or legally privileged. Unless you are the intended recipient, you may not use, copy or disclose to anyone the message or any information contained in the message or from any attachments that were sent with this email, and If you have received this email message in error, please advise the sender by email, and delete the message. Unauthorised disclosure and/or use of information contained in this email may result in civil and criminal liability. Everything in this e-mail and attachments relating to the official business of Peterstow Aquapower is proprietary to the company. Caution should be observed in placing any reliance upon any information contained in this e-mail, which is not intended to be a representation or inducement to make any decision in relation to Peterstow Aquapower. Any decision taken based on the information provided in this e-mail, should only be made after consultation with appropriate legal, regulatory, tax, technical, business, investment, financial, and accounting advisors. Neither the sender of the e-mail, nor Peterstow Aquapower shall be liable to any party for any direct, indirect or consequential damages, including, without limitation, loss of profit, interruption of business or loss of information, data or software or otherwise. The e-mail address of the sender may not be used, copied, sold, disclosed or incorporated into any database or mailing list for spamming and/or other marketing purposes without the prior consent of Peterstow Aquapower. No warranties are created or implied that an employee of Peterstow Aquapower and/or a contractor of Peterstow Aquapower is authorized to create and send this e-mail. [cid:image002.jpg@01CB0C73.07EB61F0] From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 14 June 2010 21:09 To: MS-Exchange Admin Issues Subject: RE: Problems with Entourage after migration I presume that by WSE they mean EWS. It sounds to me as if the MACs don't have the _root certificate_ installed for the certificate. That is, they are attempting to validate the SSL chain from certificate to root and a piece is missing. Unless you turn it on (off by default), most browsers won't do root investigation like that. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Paul Steele [mailto:paul.ste...@acadiau.ca] Sent: Monday, June 14, 2010 2:17 PM To: MS-Exchange Admin Issues Subject: Problems with Entourage after migration I'm passing this information on from our Helpdesk. I don't use Macs but I'm trying to help them with our Exchange 2010 migration. --- During migration testing from Exchange server 2003 to 2010 we discovered problems with our Mac Entourage 2008 users. While using Mac Office 12.2.4 and Entourage WSE version 13.0.4 we were getting a prompt regarding a certificate not being installed. While this error was unsolved it would only prompt during the first boot of Entourage and then never return during our testing. As of last week the update to Office 12.2.5 forced us to install the WSE version 13.0.5 in order to get through the installer. However the certificate error now occurs every time they open Entourage. The exact error message is unable to establist a secure connection to acadiau.ca because the correct root certificate is not installed. After clicking ok on the error box Entourage does continue to load and appears to run correctly. We have a Digicert UC cert installed on our exchange server and the domain names in the cert appear to match what client have entered in their Entourage account information. acadiau.ca does not appear in the cert (and shouldn't) and it's not clear why Entourage is complaining about it. OWA (in Safari) works fine. The upgrade to Entourage WSE is not going to be easy because the WSE version and Office version must match to get it installed correctly. Office 12.2.3 needed WSE 13.0.3 to install correctly. Office 12.2.4 needed WSE 13.0.4 to install correctly. Office 12.2.5 appears to need WSE 13.0.5 to install correctly. Microsoft's site today listed 13.0.0 as the current download which should be older, although we found 13.0.5 on a random website and used it as 13.0.0 will not install since it's actually older than the Entourage version most users are running. Has anyone has similar problems with certificates with Entourage WSE? Any suggestions would
RE: Problems with Entourage after migration
I fixed the problem by installing our wildcard certificate on the server that resolves to acadiau.ca (www.acadiau.ca). For some reason Entourage is looking at acadiau.ca and didn't like not finding a cert there... From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: June-14-10 4:09 PM To: MS-Exchange Admin Issues Subject: RE: Problems with Entourage after migration I presume that by WSE they mean EWS. It sounds to me as if the MACs don't have the _root certificate_ installed for the certificate. That is, they are attempting to validate the SSL chain from certificate to root and a piece is missing. Unless you turn it on (off by default), most browsers won't do root investigation like that. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Paul Steele [mailto:paul.ste...@acadiau.ca] Sent: Monday, June 14, 2010 2:17 PM To: MS-Exchange Admin Issues Subject: Problems with Entourage after migration I'm passing this information on from our Helpdesk. I don't use Macs but I'm trying to help them with our Exchange 2010 migration. --- During migration testing from Exchange server 2003 to 2010 we discovered problems with our Mac Entourage 2008 users. While using Mac Office 12.2.4 and Entourage WSE version 13.0.4 we were getting a prompt regarding a certificate not being installed. While this error was unsolved it would only prompt during the first boot of Entourage and then never return during our testing. As of last week the update to Office 12.2.5 forced us to install the WSE version 13.0.5 in order to get through the installer. However the certificate error now occurs every time they open Entourage. The exact error message is unable to establist a secure connection to acadiau.ca because the correct root certificate is not installed. After clicking ok on the error box Entourage does continue to load and appears to run correctly. We have a Digicert UC cert installed on our exchange server and the domain names in the cert appear to match what client have entered in their Entourage account information. acadiau.ca does not appear in the cert (and shouldn't) and it's not clear why Entourage is complaining about it. OWA (in Safari) works fine. The upgrade to Entourage WSE is not going to be easy because the WSE version and Office version must match to get it installed correctly. Office 12.2.3 needed WSE 13.0.3 to install correctly. Office 12.2.4 needed WSE 13.0.4 to install correctly. Office 12.2.5 appears to need WSE 13.0.5 to install correctly. Microsoft's site today listed 13.0.0 as the current download which should be older, although we found 13.0.5 on a random website and used it as 13.0.0 will not install since it's actually older than the Entourage version most users are running. Has anyone has similar problems with certificates with Entourage WSE? Any suggestions would be greatly appreciated.
RE: Problems with Entourage after migration
I presume that by WSE they mean EWS. It sounds to me as if the MACs don't have the _root certificate_ installed for the certificate. That is, they are attempting to validate the SSL chain from certificate to root and a piece is missing. Unless you turn it on (off by default), most browsers won't do root investigation like that. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Paul Steele [mailto:paul.ste...@acadiau.ca] Sent: Monday, June 14, 2010 2:17 PM To: MS-Exchange Admin Issues Subject: Problems with Entourage after migration I'm passing this information on from our Helpdesk. I don't use Macs but I'm trying to help them with our Exchange 2010 migration. --- During migration testing from Exchange server 2003 to 2010 we discovered problems with our Mac Entourage 2008 users. While using Mac Office 12.2.4 and Entourage WSE version 13.0.4 we were getting a prompt regarding a certificate not being installed. While this error was unsolved it would only prompt during the first boot of Entourage and then never return during our testing. As of last week the update to Office 12.2.5 forced us to install the WSE version 13.0.5 in order to get through the installer. However the certificate error now occurs every time they open Entourage. The exact error message is unable to establist a secure connection to acadiau.ca because the correct root certificate is not installed. After clicking ok on the error box Entourage does continue to load and appears to run correctly. We have a Digicert UC cert installed on our exchange server and the domain names in the cert appear to match what client have entered in their Entourage account information. acadiau.ca does not appear in the cert (and shouldn't) and it's not clear why Entourage is complaining about it. OWA (in Safari) works fine. The upgrade to Entourage WSE is not going to be easy because the WSE version and Office version must match to get it installed correctly. Office 12.2.3 needed WSE 13.0.3 to install correctly. Office 12.2.4 needed WSE 13.0.4 to install correctly. Office 12.2.5 appears to need WSE 13.0.5 to install correctly. Microsoft's site today listed 13.0.0 as the current download which should be older, although we found 13.0.5 on a random website and used it as 13.0.0 will not install since it's actually older than the Entourage version most users are running. Has anyone has similar problems with certificates with Entourage WSE? Any suggestions would be greatly appreciated.
