Google
Search WWW Search msexchangetips.blogspot.com

Wednesday, November 14, 2007

Exchange 2007: This Ca Root Certificate Is Not Trusted. To enable Trust, Install This Certificate In The Trusted Root Certification Authorities Store.

Summary: Exchange 2007 CAS server uses a self signed cert. Depending on what services your CAS role plays you may get the following error:

"This Ca Root Certificate Is Not Trusted. To enable Trust, Install This Certificate In The Trusted Root Certification Authorities Store"


Cause: In this instance, I had my CAS server using a Self Signed Cert for the Address book distributin in the Default Web Site while using a Valid third party commercial Cert for OWA. This worked fine using the article below.

Exchange 2007 and SSL Certificates
http://www.sembee.co.uk/archive/2007/01/21/34.aspx


However when viewing FREE\Busy info, the Cert error would appear with the error:

"This Ca Root Certificate Is Not Trusted. To enable Trust, Install This Certificate In The Trusted Root Certification Authorities Store"


Solution:

1. Go to the Default Web Site in IIS and remove the Self Signed Cert. Right click the Default Web Site, Directory Security, Server Certificate, Next, and Remove the cert.

2. Open Certificates in MMC. Go to Run, MMC. File Add Remove Snap In, Add Certificates; Computer Account; Local Computer and Click OK.

3. Once your Certificates MMC is open Go to Personal Certificates. Right Click Request New Cert, Next, Friendly Name = Hostname of your Server and Next and Finish.

4. Copy the new cert to the Trusted Root Certification Authorities Certificates.

5. Go back to the Default Website in IIS, Properties, Diretory Security, Server Certificate. Assign an existing certificate and choose the new cert that was created.

6. Issue IISRESET from your command prompt.



James Chong (MVP)
MCSE | M+, S+, MCTS, Security+
msexchangetips.blogspot.com

13 Comments:

Anonymous Anonymous said...

I like Archlord gold very much. Since I entered into this game, I learnt skills to earn Archlord money. Thanks to archlord online Gold let me know a lot of friends. It is my habit to buy Archlord gold, and I get some cheap Archlord gold from my friends and Internet.

I like to play Asda Story, because I like its name, also I like Asda Story gold. My friend told me that she would buy Asda Story money for me, and I was so happy. I do not like to go shopping, because it always spends a lot of money, but I never hesitate to buy Asda Story Gold. You can buy cheap Asda Story gold; it is so easy and convenient.

7:45 PM  
Anonymous Anonymous said...

It's amazing how these geeks think they are so smart and in actuality they are truly stupid because they assume everyone knows their shorthand! Keep It Simple Stupid [KISS]!

7:52 PM  
Anonymous buy seal online cegel said...

Now do you worried about that in the game do not had enough Scions Of Fate gold to play the game, now you can not worried, my friend told me a website, in here you can buy a lot SOF gold and only spend a little money, do not hesitate, it was really, in here we had much Scions Of Fate money, we can sure that you will get the cheap SOF gold, quick to come here to buy sof gold.

Now do you worried about that in the game do not had enough seal cegel to play the game, now you can not worried, my friend told me a website, in here you can buy a lot sealonline cegel and only spend a little money, do not hesitate, it was really, in here we had much seal online cegel, we can sure that you will get the cheap seal cegel, quick to come here to buy seal online cegel.

6:10 PM  
Anonymous Anonymous said...

If you are those who tend to under probate and you do not need extra help, then you can probably get by with Hogan . For men who are average weight, with no promotion of the problems that need a bit of Hogan scarpe donna with good support, durability and cushion, they should probably be a Hogan scarpe uomo . The motion control category contains the most durable, rigid and controlled sports shoes. Hogan uomo are specifically designed to limit the disease known as over probation.

6:20 PM  
Anonymous Cialis Online said...

This link has certain resemblance with another one I found a few weeks ago, however the only difference is that this one is better.

9:27 AM  
Blogger Alexis said...

This comment has been removed by the author.

5:58 AM  
Blogger Alex said...

I have known quite numerous utilities for solving MS Exchange problems. But no one of them didn't have such characteristics as the one. It might be good choice in this unpleasant situation, because of I checked it on my problem - exchange inbox repair tool.

9:37 AM  
Anonymous online certification programs said...

MS exchange is quite an utility provided you know how to use it.

4:55 AM  
Anonymous exchange 2007 certificate said...

Thank you for posting this solution, I had that error come up and luckily I found this blog through a search because I've never come across this problem before. The instructions worked and everything's fine again now.

5:24 AM  
Blogger Jennifer Deelly said...

Welldone, very interesting Blog.i loved to read this. keep it up.I will share this blog with my friends.If you search Jobs in india then visit http://www.jobdezire.com.

4:49 AM  
Blogger Gul Ahmed said...

Great Post Thanks For Sharing Informative Information..!

Learn How To Earn Money Online

12:14 PM  
Anonymous Purple_Cat said...

Quote:

It's amazing how these geeks think they are so smart and in actuality they are truly stupid because they assume everyone knows their shorthand! Keep It Simple Stupid [KISS]!

...no, that's not what KISS refers to. Stupid :p

9:00 PM  
Blogger mack orione said...

thanks for sharing this ...its a very helpful.....


Thanks:

Web Development company India

2:44 AM  

Post a Comment

<< Home

xml:lang="en" lang="en"> MS Exchange Tips: Exchange 2007: This Ca Root Certificate Is Not Trusted. To enable Trust, Install This Certificate In The Trusted Root Certification Authorities Store.