cancel
Showing results for 
Search instead for 
Did you mean: 

Problems after installing new certificate for EV server in IIS ...

BruGuy
Level 6

Hello,

Has anyone seen this before?

The SSL certificate which we use to secure EV communications with Outlook clients is about to expire, so we installed a new one in IIS Manager on the EV server. We did this by clicking on Import Certificate (PFX), Edit Bindings of Default Site and selecting the new cert from the drop-down list (we did not use the Complete Request wizard). No changes were made to EV.

However, although opening the shortcuts in Outlook still work, we now have the following problems:

- the Archive Explorer in Outlook shows the folder structure but clicking on any folder displays "failed to perform the search";

- similarly, doing a search in the Archive Explorer gives the same result;

- trying to open either the Archive Explorer or EV Advanced Search in IE11 gives "Internet Explorer 6.0 or later is supported". This can probably be fixed by adding the site to the compatabilty list but that's not immediately feasible with a few thousand PCs (and was not needed before the change);

- manually archiving messages does not work (remain pending) and deleting archived messages gives an error.

Let me reiterate that everything was working fine before installing the new cert. The EV server is clustered so when we fail back to a node which has the old cert, everything works again. IISReset does not help.

Both the old and new certs were generated in-house (on different CAs) and the cert chain is fully trusted on the PCs. All the names for the servers are specified as SANs in the new cert, just like the old one.

Environment: Clustered EV10 (recent installation) with Exchange 2010, Outlook 2010 on Win7 with IE11. 

Grateful for any tips!

Thanks,

- Alan.

3 REPLIES 3

AndrewB
Moderator
Moderator
Partner    VIP    Accredited

it sounds like some other IIS setting was modified in the process. luckily you have 2 nodes and can compare the differences.

JimmyNeutron
Level 6
Partner Accredited

Did you perform an IIS resest after importing the cert?

JimmyNeutron
Level 6
Partner Accredited

The last part of this article explains that you need to synchronize all the mailboxes in order fo rthe change to take effect. Has that been done?

The article notes in the last page:

  1.   Synchronize all mailboxes that are enabled for Enterprise Vault for these updates to take effect.

    Note: Until you complete this step, existing Enterprise Vault users may not be able to access Enterprise Vault facilities. 

 

https://download.veritas.com/resources/content/live/TUTORIALS/83000/HOWTO83452/en_US/HOWTO83452.pdf?__gda__=1455106565_83d6972624d0bba527623d0072594a23