I did the transition from Exchange 2007 to Exchange 2003,
and i exported my digicert cert from Exchange 2007 and imported in Exchange 2013.
I did http redirection to https for owa.
in IIS for RPC virtual directory ssl is enabled and there is no redirection for http
in IIS for Active Sync Virtual Directory ssl is enabled and there is no redirection for http
my exchange 2013 is under testing and it is not connected to outside world.
active sync is not working internally. so if it works then i can put in production.
please do refer it and guide me.
[PS] C:\Windows\system32>Get-ClientAccessServer | fl Name,AutoDiscoverServiceInternalUri
Name : MAIL1
AutoDiscoverServiceInternalUri : https://autodiscover.mydomain.com/autodiscover/autodiscover.xml
[PS] C:\Windows\system32>Test-ActiveSyncConnectivity -MailboxCredential (Get-Credential mydomain.com\t1) | fl
RunspaceId : 29d435ca-d26f-4e07-889e-138796ad77dc
LocalSite : Default-First-Site-Name
SecureAccess : True
VirtualDirectoryName :
Url :
UrlType : Unknown
Port : 0
ConnectionType : Plaintext
ClientAccessServerShortName : mail1
LocalSiteShortName : Default-First-Site-Name
ClientAccessServer : mail1.mydomain
Scenario : Options
ScenarioDescription : Issue an HTTP OPTIONS command to retrieve the Exchange ActiveSync protocol version.
PerformanceCounterName : DirectPush Latency
Result : Failure
Error : [System.Net.WebException]: The underlying connection was closed: Could not establish
trust relationship for the SSL/TLS secure channel. Inner error
[System.Security.Authentication.AuthenticationException]: The remote certificate is
invalid according to the validation procedure.
UserName : t1
StartTime : 4/17/2014 7:09:20 PM
Latency : -00:00:01
EventType : Error
LatencyInMillisecondsString :
Identity :
IsValid : True
ObjectState : New
[PS] C:\Windows\system32>Test-OutlookWebServices | fl
RunspaceId : 29d435ca-d26f-4e07-889e-138796ad77dc
Source : mail1.mydomain.com
ServiceEndpoint : autodiscover.mydomain.com
Scenario : AutoDiscoverOutlookProvider
ScenarioDescription : Autodiscover: Outlook Provider
Result : Failure
Latency : 23043
Error : System.Net.WebException: The underlying connection was closed: Could not establish trust
relationship for the SSL/TLS secure channel. --->
System.Security.Authentication.AuthenticationException: The remote certificate is invalid
according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message,
AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest
asyncRequest)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest
asyncRequest)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest
asyncRequest)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext,
ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback
callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback
callback, Object state)
at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.ConnectStream.WriteHeaders(Boolean async)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.GetResponse()
at
Microsoft.Exchange.Management.SystemConfigurationTasks.ServiceValidatorBase.InternalInvoke()
at Microsoft.Exchange.Management.SystemConfigurationTasks.ServiceValidatorBase.Invoke()
Verbose : [2014-04-17 16:11:18Z] Autodiscover connecting to
'https://autodiscover.mydomain.com/autodiscover/autodiscover.xml'.
[2014-04-17 16:11:18Z] Test account: extest_8b4d42541ac04@mydomain.com Password: ******
[2014-04-17 16:11:41Z] Autodiscover request:
User-Agent: MAIL1/Test-OutlookWebServices/extest_8b4d42541ac04@mydomain.com
Content-Type: text/xml; charset=utf-8
Host: autodiscover.mydomain.com
Content-Length: 470
Expect: 100-continue
Connection: Keep-Alive
[2014-04-17 16:11:41Z] Autodiscover request:
<?xml version="1.0"?>
<Autodiscover xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/requestschema/2006">
<Request>
<EMailAddress>extest_8b4d42541ac04@mydomain.com</EMailAddress>
<AcceptableResponseSchema>http://schemas.microsoft.com/exchange/autodiscover/outlook/response
schema/2006a</AcceptableResponseSchema>
</Request>
</Autodiscover>
[2014-04-17 16:11:41Z] Autodiscover response:
System.Net.WebException: The underlying connection was closed: Could not establish trust
relationship for the SSL/TLS secure channel. --->
System.Security.Authentication.AuthenticationException: The remote certificate is invalid
according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message,
AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest
asyncRequest)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest
asyncRequest)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest
asyncRequest)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer,
AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext,
ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback
callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback
callback, Object state)
at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.ConnectStream.WriteHeaders(Boolean async)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.GetResponse()
at
Microsoft.Exchange.Management.SystemConfigurationTasks.ServiceValidatorBase.InternalInvoke()
at Microsoft.Exchange.Management.SystemConfigurationTasks.ServiceValidatorBase.Invoke()
MonitoringEventId : 6001
RunspaceId : 29d435ca-d26f-4e07-889e-138796ad77dc
Source : mail1.mydomain.com
ServiceEndpoint :
Scenario : ExchangeWebServices
ScenarioDescription : Exchange Web Services
Result : Skipped
Latency : 0
Error : Skipped testing Exchange Web Services because the Autodiscover step failed.
Verbose :
MonitoringEventId : 5002
RunspaceId : 29d435ca-d26f-4e07-889e-138796ad77dc
Source : mail1.mydomain.com
ServiceEndpoint :
Scenario : AvailabilityService
ScenarioDescription : Availability Service
Result : Skipped
Latency : 0
Error : Skipped testing Availability Service because the Autodiscover step failed.
Verbose :
MonitoringEventId : 5003
RunspaceId : 29d435ca-d26f-4e07-889e-138796ad77dc
Source : mail1.mydomain.com
ServiceEndpoint :
Scenario : OfflineAddressBook
ScenarioDescription : Offline Address Book
Result : Skipped
Latency : 0
Error : Skipped testing Offline Address Book because the Autodiscover step failed.
Verbose :
MonitoringEventId : 5004