Exchange 2010 ActiveSync SSL证书问题

Question

我们有一个与Exchange 2010 Activesync.My相关的问题:当我从外部连接到activesync时，我收到以下错误。

ExRCA is testing Exchange ActiveSync.
The Exchange ActiveSync test failed.

Test Steps

Attempting to resolve the host name mail.xxxxx.com in DNS.
The host name resolved successfully.

Additional Details
IP addresses returned: xx.0.x3.4
Testing TCP port 443 on host mail.x.com to 
ensure it's listening and open.
The port was opened successfully.
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.

Test Steps

Validating the certificate name.
Certificate name validation failed.
Tell me more about this issue and how to resolve it

Additional Details
Host name mail.x.com doesn't match any name found 
on the server certificate CN=xxxxxx.

提前谢谢你的帮助。

Answer 1

如果要连接到外部的DNS名称(例如mail.x.com)不是为Exchange配置的SSL证书上的名称之一(如果您是这样发布Exchange的话，那么您将看到该错误)。

Exchange安装了一个自签名SSL证书，但是对于这样的外部访问场景，您需要用适当的SAN证书来替换它，否则您将面临配置和支持问题的噩梦。

下面是一些关于为Exchange 2010设置SSL证书的指南。

http://exchangeserverpro.com/configure-an-ssl-certificate-for-exchange-server-2010