Enabling TLS on Exchange 2007 (Full Version)

All Forums >> [Microsoft Exchange 2007] >> Secure Messaging



Message

hunglikethor -> Enabling TLS on Exchange 2007 (19.Feb.2007 12:56:48 PM)

I though I had TLS enabled; however when I telnet to the exchange 2007 server to check, I get:
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
$ telnet exchange2007 25
Trying 192.168.1.106...
Connected to EXCHANGE2007.mmicmanhomenet.local.
Escape character is '^]'.
220 exchange2007.mmicmanhomenet.local Microsoft ESMTP MAIL Service ready at Mon, 19 Feb 2007 09:52:40 -0800
EHLO root
250-exchange2007.mmicmanhomenet.local Hello [192.168.1.99]
250-SIZE
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-X-ANONYMOUSTLS
250-AUTH GSSAPI NTLM
250-X-EXPS GSSAPI NTLM
250-8BITMIME
250-BINARYMIME
250-CHUNKING
250 XEXCH50
QUIT
221 2.0.0 Service closing transmission channel
Connection closed by foreign host.
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
"250-STARTTLS" is missing.  How do I add this option so that opportunistic TLS is enabled?

Thanks in advance!

Edward Ray



hunglikethor -> RE: Enabling TLS on Exchange 2007,fixed (20.Feb.2007 2:50:55 PM)

Had to run

Enable-ExchangeCertificate -thumprint <thumbprint of certificate> -services:SMTP

Which enabled the STARTTLS on the exchange 2007 server.

Now on to a client authentication in TLS issue, which will be in a different post.

Edward Ray



Jim Locke -> RE: Enabling TLS on Exchange 2007,fixed (20.Mar.2007 9:21:04 PM)

I have the same issue on edge server, where did you get the thumbprint & certificate for the enable

Jim..



t0ta11ed -> RE: Enabling TLS on Exchange 2007,fixed (12.Apr.2007 4:39:03 PM)

Cert info along with thumbprints can be viewed with the get-exchangecertificate command. (Not 100% on the syntax of the command, but it's been discussed at length in other posts.) Refer to this one:

http://forums.msexchange.org/m_1800431120/mpage_1/key_/tm.htm#1800431120



Page: [1]