{"id":4243,"date":"2019-09-16T12:41:19","date_gmt":"2019-09-16T12:41:19","guid":{"rendered":"https:\/\/www.kerneldatarecovery.com\/blog\/?p=4243"},"modified":"2023-06-14T10:18:07","modified_gmt":"2023-06-14T10:18:07","slug":"remove-certificate-warning-error-after-installing-exchange-server-2016","status":"publish","type":"post","link":"https:\/\/www.kerneldatarecovery.com\/blog\/remove-certificate-warning-error-after-installing-exchange-server-2016\/","title":{"rendered":"How to remove certificate warning error after installing Exchange Server 2016"},"content":{"rendered":"

Last month, when we installed the Exchange Server 2016 in our company and migrated from the previous Exchange Server 2010, some of our users started complaining that they were getting an error related to the SSL Certificate in Outlook.<\/p>\n

The error message was saying:<\/p>\n

\u201cThe Security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority.\u201d<\/strong>
\n\"error
\nIt is a security alert message which checks the configuration of your Outlook profile with the Exchange Server and presents the message to you.<\/p>\n

Reasons behind the certificate warning<\/h3>\n

After the installation of Exchange Server 2016 at the organization\u2019s Active Directory environment, The Server setup creates a Service Connection Point (SCP) for the Autodiscover feature. The role of Autodiscover in Exchange Server<\/a> is to search for the available settings and services for the client systems at the Exchange Server. So, when you create a new Outlook profile with an Exchange account, you do not need to set up the settings manually, but Autodiscover will search and establish the connection.<\/p>\n

The Autodiscover service connection point gets registered with the help of a URL having the fully qualified domain name of the Exchange Server. You can check the URL with the help of the following command run in the Exchange Management Shell.<\/p>\n

Get-ClientAccessService -Identity <ServerName> | Select AutodiscoverServiceInternalUri<\/p>\n

Example<\/p>\n

Get-ClientAccessService -Identity NDPR021 | Select AutodiscoverServiceInternalUri<\/div>\n

The connection for the Autodiscover feature from the client system gets establish through an HTTPS (SSL) connection. The same HTTPS connection is used to connect with various Exchange Services like Outlook on the Web (OWA), Activesync, Outlook Anywhere, Exchange Web Services, etc.<\/p>\n

The HTTPS connection is dependent on the SSL certificate, and there are three criteria for the SSL certificate which it should fulfill:<\/p>\n

    \n
  1. The certificate is issued by a trusted Certified Authority (CA).<\/li>\n
  2. The certificate is not expired.<\/li>\n
  3. The name on the certificate should match with the server name to which the client\u2019s system wants to connect.<\/li>\n<\/ol>\n

    How to fix the \u2018certificate security warning\u2019 issue<\/h4>\n

    There are two ways to fix the warning message issue:<\/p>\n

      \n
    1. Change the Autodiscover URL.<\/li>\n
    2. Install an SSL Certificate from an authorized vendor.<\/li>\n<\/ol>\n

      Change the Autodiscover URL<\/h4>\n

      To change the Autodiscover URL, you should use a DNA name or alias of the Server name. It is advisable not to use the actual name of the Exchange Server\u2019s full domain name.<\/p>\n

      Set-ClientAccessService -Identity NDPR021 -AutoDiscoverServiceInternalUri https:\/\/mail.admin-theodore.com\/Autodiscover\/Autodiscover.xml<\/div>\n

      If the DNS record of the namespace is not present in the Exchange, you need to add the A record at the internal DNS Zone.<\/p>\n

      Install an SSL Certificate from an authorized vendor.<\/h4>\n

      When the namespace is working correctly, you need to install the SSL Certificate at the Exchange Server 2016. Here is the brief procedure of installing the SSL certificate at the Exchange Admin Center:<\/p>\n

        \n
      1. Login to Exchange Admin Center and go to Servers>>Certificates<\/strong>.<\/li>\n
      2. There is a \u2018Select Server<\/strong>\u2019 list where you need to select the specific Exchange Server to install the certificate. Choose \u2018More Options \u2022\u2022\u2022<\/strong>\u2019 and click the Import Exchange Certificate<\/strong>.<\/li>\n
      3. At the Import Exchange certificate<\/strong> wizard, there is a \u2018This wizard will import a certificate from a file<\/strong>\u2019 page, and you need to fulfill the following data:\n