-----提供AD\Exchange\Lync\Sharepoint\CRM\SC\O365等微软产品实施及外包,QQ:185426445.电话18666943750api
服务器环境:Exchange server 2007 SP3服务器
客户端:WIN7+Outlook2010ide
链接方式:Anywhere测试
证书:采用第三方公网证书颁发证书,证书名称为mail.contoso.com,主题备用名称为mail.contoso.com,autodiscover.contoso.com(这个是测试环境使用的证书名称,真实环境相似)spa
问题:打开Outlook后,提示证书名称错误,显示Exchange2007内部主机名exchange2007…3d
经查,服务器采用第三方证书颁发机构颁发的公网证书,没包括计算机内部名称。server
一、因而设置相关的虚拟目录都为对外域名名称mail.contoso.com。xml
Add-PSSnapin microsoft.exchange*blog
Get-OwaVirtualDirectory |fl name,InternalUrl,ExternalUrlip
Get-ActiveSyncVirtualDirectory |fl name,InternalUrl,ExternalUrl
Get-OabVirtualDirectory |fl name,InternalUrl,ExternalUrl
Get-WebServicesVirtualDirectory |fl name,InternalUrl,ExternalUrl
Get-OwaVirtualDirectory |Set-OwaVirtualDirectory -ExternalUrl https://mail.contoso.com/owa -InternalUrl
https://mail.contoso.com/owa
Get-ActiveSyncVirtualDirectory |Set-ActiveSyncVirtualDirectory -ExternalUrl
https://mail.contoso.com/Microsoft-Server-ActiveSync -InternalUrl https://mail.contoso.com/Microsoft-Server-ActiveSync
Get-OabVirtualDirectory |Set-OabVirtualDirectory -ExternalUrl https://mail.contoso.com/OAB
Get-WebServicesVirtualDirectory |Set-WebServicesVirtualDirectory -InternalUrl
https://mail.contoso.com/EWS/Exchange.asmx -ExternalUrl https://mail.contoso.com/EWS/Exchange.asmx
Get-OutlookAnywhere
Get-ClientAccessServer |select name,auto*
Get-ClientAccessServer |Set-ClientAccessServer -AutoDiscoverServiceInternalUri
https://autodiscover.contoso.com/Autodiscover/Autodiscover.xml
二、确保anywhere链接的也是对外名称mail.contoso.com。
三、客户端仍是报证书错误,怀疑这个和TLS认证相关,因而,修改相关设置,问题解决,outlook打开不在报证书错误。以下所示,取消接收链接器default…仅在启动TLS以后提供基自己份认证。
四、设置client…链接的FQDN名称为mail.contoso.com。
五、取消接收链接器client…仅在启动TLS以后提供基自己份认证。