Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CUPS 7.0.4 with E2K7 Certificate

Hi - We have a customer with an E2K7 server which has roles as both their mailbox and owa servers. The E2K7 server has a self signed certificate installed by default to secure client / server communications as per article:

http://technet.microsoft.com/en-us/library/bb851505(EXCHG.80).aspx

We have uploaded this default certificate to CUPS successfully (all green and ticked in CUPS admin), however, we still cannot display Calendar Presence. The PE logs show the following error:

"EPE|system.pe.pa.owa.backend 2128230 ERROR ExchangeSession: 0x09dbc8c8 ssl problem(s): CERTIFICATE_AUTHORITY_SIGNATURE_NOT_TRUSTED - rejected"

TAC have advised that this is due to the CA bit not being set as per bug CSCsq64034:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsq64034

The advice has been to re-issue the cert using makecert, however, when we have tried this it breaks Outlook / Exchange 2007 communications.

Has anyone come across this situation before?

thanks again

1 ACCEPTED SOLUTION

Accepted Solutions
Red

Re: CUPS 7.0.4 with E2K7 Certificate

Per Microsoft, a self-signed cert on IIS (ie. OWA) does not have the CA (Certificate Authority) bit set.

Without CA bit, CUPS won't trust the cert.

In order to get the CA bit, you either get the cert from a CA or use makecert.exe.

Michael

http://htluo.blogspot.com

1 REPLY
Red

Re: CUPS 7.0.4 with E2K7 Certificate

Per Microsoft, a self-signed cert on IIS (ie. OWA) does not have the CA (Certificate Authority) bit set.

Without CA bit, CUPS won't trust the cert.

In order to get the CA bit, you either get the cert from a CA or use makecert.exe.

Michael

http://htluo.blogspot.com

187
Views
0
Helpful
1
Replies
CreatePlease to create content