Outlook 2007 Auto discover feature and SBS2008 & EBS2008

The auto discover feature is really cool but it will give you this error


Why?, Simple, the FQDN is in the certificate that is installed by default. So if you want this to work without any errors you need to replace the certificate with a certificate that also have that name.

In the default certificate Microsoft includes the following name by default, externaldomain.com, remote.externaldomain.com and server.internaldomain.local and we need to put the back in again plus the new name autodiscover.externaldomain.com

So this is how you do

  • On the SBS server run MMC.EXE and add the snap-in for Certificates and for certificate templates.
  • Change the permission on the “Web Server” certificate template and allow the SBS server to “Enroll”
  • image
  • Click on Certificates (Local Computer) and open “Personal – Certificates”
  • Right click “All Tasks – Request New Certificate”
  • Select “Web Server”
  • image
  • Select Subject Name: as Common name with the value of the external name (remote.externaldomain.com)
  • Select Alternative name: as DNS and add all the names you would like to have.
    plus others if you would like to have…
  • Hit OK and select Enroll

Now you can open IIS Admin, open the SBS Web Application site, and change the certificate by opening “Bindings” and look for 443. Select Edit and change the certificate. You will se at least two certificates with the same name. With the view function you can see the names in the certificates.

Note. This will not destroy or delete your existing certificate, if you want you can always switch back.

There is of course one other way to fix this issue and that is to change in the external DNS. The SBS Diva has a really nice post about this if you prefer to do it in DNS instead


Mikael Nystrom
MCT, MVP Windows Server – Setup/Deployment

Categories: Uncategorized

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.