Always failed in connecting to the Outlook Anywhere through TMG 2010 with certificate ?

Posted by Albert Widjaja on Server Fault See other posts from Server Fault or by Albert Widjaja
Published on 2011-03-09T00:06:19Z Indexed on 2011/03/09 0:11 UTC
Read the original article Hit count: 553

Hi,

I have successfully published Exchange Activesync using TMG 2010 and OWA internally only but somehow when I tried to publish the Outlook Anywhere it failed ( as can be seen from the https://www.testexchangeconnectivity.com )

Settings: IIS 7 settings, I have unchecked the require SSL and "Ignore" the client certificate

Exchange CAS settings:

ServerName                 : ExCAS02-VM
SSLOffloading              : True
ExternalHostname           : activesync.domain.com
ClientAuthenticationMethod : Basic
IISAuthenticationMethods   : {Basic}
MetabasePath               : IIS://ExCAS02-VM.domainad.com/W3SVC/1/ROOT/Rpc
Path                       : C:\Windows\System32\RpcProxy
Server                     : ExCAS02-VM
AdminDisplayName           :
ExchangeVersion            : 0.1 (8.0.535.0)
Name                       : Rpc (Default Web Site)
DistinguishedName          : CN=Rpc (Default Web Site),CN=HTTP,CN=Protocols,CN=ExCAS02-VM,CN=Servers,CN=Exchange Administrative.......
Identity                   : ExCAS02-VM\Rpc (Default Web Site)
Guid                       : 59873fe5-3e09-456e-9540-f67abc893f5e
ObjectCategory             : domainad.com/Configuration/Schema/ms-Exch-Rpc-Http-Virtual-Directory
ObjectClass                : {top, msExchVirtualDirectory, msExchRpcHttpVirtualDirectory}
WhenChanged                : 18/02/2011 4:31:54 PM
WhenCreated                : 18/02/2011 4:30:27 PM
OriginatingServer          : ADDC01.domainad.com
IsValid                    : True

Test-OutlookWebServices settings:

1013 Error When contacting https://activesync.domain.com/Rpc received the error The remote server returned an error: (500) Internal Server Error.
1017 Error [EXPR]-Error when contacting the RPC/HTTP service at https://activesync.domain.com/Rpc. The elapsed time was 0 milliseconds.

https://www.testexchangeconnectivity.com testing result:

Checking the IIS configuration for client certificate authentication.
    Client certificate authentication was detected.

    Additional Details
    Accept/Require client certificates were found. Set the IIS configuration to Ignore Client Certificates if you aren't using this type of authentication.

environment: Windows Server 2008 (HT-CAS) Exchange Server 2007 SP1 TMG 2010 Standard Outlook 2007 client SP2.

Any kind of help would be greatly appreciated.

Thanks.

© Server Fault or respective owner

Related posts about exchange-2007

Related posts about outlook-anywhere