SBS 2003: Unable to establish a secure connection...

[jcrmeyer]

Hi,

I know this issue has come up a few times however I haven't seen a
satisfactory answer our particualr problem...we have Mac clients
running Entourage 2004 (OS X 10.4.7, all Office updates applied)
connecting to SBS 2003 SP2. I've set up clients as described in:

http://www.microsoft.com/downloads/...7b-0ff6-4558-a54b-6070e2c8cd65&DisplayLang=en

Problem is when launching Entourage we still get the "Unable to
establish a secure connection to server.domain.local because the
correct root certificate is not installed". If I click through this
warning then everything still seems to work (send/receive, public
folders, GAL all okay). I've installed the root certificate as
described (dragged the cert from ClientApps on to Keychain Access,
selected X509 Anchors).

If I browse to OWA through Safari I don't get any warnings. Also
checked the common name entries in the certificate and they match the
name used in Entourage config (not sure if it matters but there are a
number of common name entries, one of which matches).

Really don't know where to go from here...any help appreciated

 

[Barry Wainwright [MVP]]

Yes, I was having that trouble and put out an appeal to the other MVPs &
softies for help. Corentin came up with the following suggestion that cured
it for me:

Using Safari, enter the https://domain.com/exchange address that Entourage
tries to connect to - you should get the 'untrusted certificate error'
Chooses 'show certificate' in the dialog, and in the dialog that follows,
drag the certificate icon to the desktop.
Double-click it to launch the certificate importer and select the X509
anchors keychain as the destination
Quit entourage and re-launch.

It fixed it for me, even though a copy of the certificate was already in my
X509 keychain!

 

[jcrmeyer]

But this is the weird bit. If using Safari I go to https://<FQDN of
server>/exchange (as it is entered in Entourage) I don't get an
untrusted certificate error! Safari seems perfectly happy to trust it
(because its in my X509 keychain). Its just Entourage that has the
problem...

 

[jcrmeyer]

Sorry to bump this, but would really appreciate any more help.
Certificate is installed as an X509 anchor (and I've tried installing
as Digital Identity through MS Cert Manager), no warnings in Safari,
and yet still the Entourage warning...

Thanks!