Welcome to ISAserver.org

SSL Certificate not found?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Web Publishing >> SSL Certificate not found?

Page: [1]

Message

<< Older Topic Newer Topic >>

SSL Certificate not found? - 5.Jul.2007 11:12:56 AM

wieckjc

Posts: 6
Joined: 28.Jun.2007
Status: offline

I have a Web Publishing rule configured for Exchange ActiveSync. Having problems getting ISA server talking to FrontEnd Exchange via port443. For my firewall policy under the Bridging tab I selected redirect requests to SSL port 443 and checked the Use a certificate to authenticate to the SSL web server. However, upon trying to select the certificate it states that No valid certificates were found on the server in this array.

Why can ISA not see the cert that I imported via MMC certificates snap-in. Cert is listed in personal and root stores.

Please help

Thanks

< Message edited by wieckjc -- 5.Jul.2007 11:14:37 AM >

Post #: 1

Featured Links*

RE: SSL Certificate not found? - 6.Jul.2007 7:31:15 AM

gigio

Posts: 9
Joined: 6.Jul.2007
Status: offline

have you selected the "Computer Account" when you added the snap-in to the mmc? By default "My User Account" is selected, verify that you have the valid certificate under "Certificates (Local Computer) - Personal - Certificates"

(in reply to wieckjc)

Post #: 2

RE: SSL Certificate not found? - 11.Jul.2007 9:38:47 AM

IanC

Posts: 237
Joined: 11.Jul.2007
From: UK
Status: offline

The Use a certificate to authenticate. . . option on the bridging tab enables you to specify a User Certificate that can be used to authenticate to web sites requiring SSL certificate authentication. If you have not installed a user certificate then none will be available to select.

If the Exchange FE server doesn't require SSL user authentication then don't select the certificate option on the bridging tab, just make sure that the publishing rule has an appropriate delegation method configured.

Hope this helps.

(in reply to wieckjc)

Post #: 3