I was getting the errors of \u201cThe Certificate is Invalid for Exchange Server Usage\u201d to \u201cThe certificate status could not be determined because the revocation check failed.\u201d<\/p>\n\n\n\n
Here is how I fixed them in our test environment before we deployed to live, the first error is a common one, the second one seems to only be if you use a proxy server, or you have a web filter that is a bit overenthusiastic.<\/p>\n\n\n\n
\u201cThe Certificate is Invalid for Exchange Server Usage\u201d<\/strong> fix:<\/p>\n\n\n\n http:\/\/exchangeserverpro.com\/exchange-server-2010-certificate-invalid-for-exchange-server-usage-error<\/a> I imported the CA root and then intermediate CA certs into the root and intermediate stores respectively.<\/p>\n\n\n\n My CA provider had given me a zip with 4 files:<\/p>\n\n\n\n The certificate.crt file, which is the actual certificate i’d asked for and the below three files which I imported.<\/p>\n\n\n\n The \u201cAddtrustExternalCARoot.crt\u201d<\/strong> file needs to be imported into the \u201cLocal Computer\\Trusted Root Certification Authorities\u201d <\/strong>store.<\/p>\n\n\n\n The \u201cTERENASSLCA.crt\u201d<\/strong> and \u201cUTNAddTrustServer_CA.crt\u201d<\/strong> needed to be imported into the \u201cLocal Computer\\Intermediate Certification Authorities\u201d <\/strong>store.<\/p>\n\n\n\n \u201cThe certificate status could not be determined because the revocation check failed\u201d<\/strong> fix:<\/p>\n\n\n\n Once i’d fixed these two problems I could then assign the certificate some services and make use of it.<\/p>\n\n\n\n I performed the steps in here (see link below), normally in the production environment we would not be using a proxy server so would not need to do this: <\/a>http:\/\/exchangeserverpro.com\/exchange-2010-certificate-revocation-checks-and-proxy-settings<\/a>. I also needed to put in an exception in the IE proxy settings for \u201cserver.domain.co.uk\u201d (so the Exchange Powershell doesn\u2019t break) and then rerun the command to import the proxy settings into the winhttp proxy, restarted the \u201cWinhttp Web Proxy Auto-discovery Service\u201d to pick up the new settings.<\/p>\n","protected":false},"excerpt":{"rendered":" I was getting the errors of \u201cThe Certificate is Invalid for Exchange Server Usage\u201d to \u201cThe certificate status could not be determined because the revocation check failed.\u201d Here is how I fixed them in our test environment before we deployed to live, the first error is a common one, the second one seems to only … Read more<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[32],"tags":[],"class_list":["post-619","post","type-post","status-publish","format-standard","hentry","category-microsoft-exchange"],"_links":{"self":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/619","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=619"}],"version-history":[{"count":1,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/619\/revisions"}],"predecessor-version":[{"id":1518,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/619\/revisions\/1518"}],"wp:attachment":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=619"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=619"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=619"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}