27.5 C
Dubai
Tuesday, November 29, 2022

Certificate is invalid and revocation check failure in Exchange Server

When you import a certificate from a certificate authority . It checks the revocation status of an SSL Certificate, the client connects to the URLs and downloads the CA’s CRLs. Then, the client searches through the CRL for the serial number of the certificate to make sure that it hasn’t been revoked.

but when exchange servers has internet. It will not have any issues. But when its behind the proxy. it may not have issues if your proxy is configured through .use automatic detect settings.

As it uses the system account  –  System account has its own proxy settings – Lets see how to access the systems account proxy settings.

image

image

Revocation Check failure

image

To check your CRL urls – Use internet explorer – Security lock – view certificates

Solution –

Download Sysinternals to check the system proxy settings

Get PsExec.exe into a folder. browse to command prompt.

image

PsExec.exe –i –d –s cmd

run whoami make sure you are in system account proxy settings

inetcpl.cpl to access system proxy settings

So that we can change the win http proxy settings of the system.

image

Entered my proxy settings. Click ok.

image

Reboot the server.

Certificate is valid now.

image

Satheshwaran Manoharan
Satheshwaran Manoharanhttps://www.azure365pro.com
Specialized in Microsoft Azure - Office 365 / Microsoft Exchange; conducted numerous projects worldwide in designing, supporting, and implementing messaging and virtualization infrastructure for medium-sized and large enterprises. Further, I am a Cloud Architect and Technical Advisor for various start-ups.

Related Articles

2 COMMENTS

  1. WOW! Really nice article, there was indeed an old proxy entered in the inetcpl of the SYSTEM user. Thanks a bunch!

LEAVE A REPLY

Please enter your comment!
Please enter your name here

× How can I help you?