Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a problem related Exchange Server 2010 Activesync.My problem is;When I connecting to activesync from outside, I am receiving the following error.

ExRCA is testing Exchange ActiveSync.
The Exchange ActiveSync test failed.

Test Steps

Attempting to resolve the host name in DNS.
The host name resolved successfully.

Additional Details
IP addresses returned: xx.0.x3.4
Testing TCP port 443 on host to 
ensure it's listening and open.
The port was opened successfully.
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.

Test Steps

Validating the certificate name.
Certificate name validation failed.
Tell me more about this issue and how to resolve it

Additional Details
Host name doesn't match any name found 
on the server certificate CN=xxxxxx.

Thanks in advance all your help.

share|improve this question
What are the EXACT names in your cert? Is it a standard SSL, wildcard, UC, self signed? – DanBig Feb 11 '11 at 13:28
Do you have a SSL certificate running? is that self signed or actually bought with one of the major SSL companies? And is webmail working from an external address ? – user70424 Feb 11 '11 at 14:55
up vote 1 down vote accepted

If the DNS name you're connecting to externally (eg is not one of the names on the SSL cert configured for Exchange (andr for ISA/TMG if thats how you're publishing Exchange) then you'll see that error.

Exchange installs with a self-signed SSL cert but you need to replace that with a proper SAN cert for external access scenarios like this, or you face a nightmare of configuration and support issues.

Here is some guidance for setting up an SSL certificate for Exchange 2010.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.