Chat
Guest
|
Posted:
Mon Nov 21, 2005 1:58 am Post subject:
RPC over HTTPS |
|
|
Attempting this with Single Exchange Server, but it fails with "Your
Microsoft Exchange Server is Unavailable".
Browsing to https://server.company.co.uk/exchange succeeds immediately and
confirms SSL connectivity (padlock and yellow URL)
Browsing to https://server.company.co.uk/rpc fails with:
The page requires a client certificate
The page you are attempting to access requires your browser to have a Secure
Sockets Layer (SSL) client certificate that the Web server will recognize.
The client certificate is used for identifying you as a valid user of the
resource.
Please try the following:
* Contact the Web site administrator if you believe you should be able
to view this directory or page without a client certificate, or to obtain a
client certificate.
* If you already have a client certificate, use your Web browser's
security features to ensure that your client certificate is installed
properly. (Some Web browsers refer to client certificates as browser or
personal certificates.)
HTTP Error 403.7 - Forbidden: SSL client certificate is required.
Internet Information Services (IIS)
This happens both internally on the LAN and externally over the Internet, as
the FQDN is identical for both scenarios.
The Exchange Server now has Windows 2003 SP1 and Exchange 2003 SP2, but the
problem persists.
I read somewhere (MS I believe) to tick the box "This is a Front End Server"
even though it's a single server. However, this is not accepted by the system.
There is a second server on the LAN whcih is also a DC and also a GC. Its
name has been added into the Registry entry for the ports, on the Exchange
Server. It is not an Exchange Sever however.
I have meticulously followed every Microsoft and other guide and advice to
installing this, but am now looking for help!
The certificate is a 14 day trial Verisgn one expiring on 30 Nov.
It seems it must be to do with the RPC Proxy Server, which of course is the
same as the Exchange Server - there is only one certificate for "both".
Any clues or advice would be most welcome!
|
|