我们有一个与 Exchange Server 2010 Activesync 相关的问题。我的问题是；当我从外部连接到 activesync 时，收到以下错误。
ExRCA is testing Exchange ActiveSync.
The Exchange ActiveSync test failed.
Test Steps
Attempting to resolve the host name mail.xxxxx.com in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: xx.0.x3.4
Testing TCP port 443 on host mail.x.com to
ensure it's listening and open.
The port was opened successfully.
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.
Test Steps
Validating the certificate name.
Certificate name validation failed.
Tell me more about this issue and how to resolve it
Additional Details
Host name mail.x.com doesn't match any name found
on the server certificate CN=xxxxxx.
提前感谢您的所有帮助。
答案1
如果您外部连接的 DNS 名称（例如 mail.x.com）不是为 Exchange 配置的 SSL 证书上的名称之一（如果您通过 ISA/TMG 发布 Exchange，则为 ISA/TMG 的名称之一），那么您将看到该错误。
Exchange 使用自签名 SSL 证书进行安装，但对于此类外部访问场景，您需要将其替换为适当的 SAN 证书，否则您将面临配置和支持问题的噩梦。
以下是为 Exchange 2010 设置 SSL 证书的一些指南。
http://exchangeserverpro.com/configure-an-ssl-certificate-for-exchange-server-2010