Exchange 2010 PowerShell commands to fix cert errors
This is one of those things that I use regularly enough that I can find it quickly but not so regularly that I have it memorized… yet. To save me and hopefully you some time, here are the Powershell commands needed to change your Exchange 2010 URLs if you don’t have a SAN cert.
get-ClientAccessServer | fl – this will show AutoDiscoverServiceInternalUri, which leads to… |
set-clientaccessserver -identity YOURSERVER -autodiscoverserviceinternaluri “the FQDN that’s on your SSL + additional url crap shown above”
get-webservicesvirtualdirectory | fl – this will show the InternalNLBBypassUrl, which leads to… |
set-webservicesvirtualdirectory -identity SAMEASABOVE -internalnlbbypassurl “fqdn + additional url crap as specified in the first readout”
Match the syntax specified by the first get-… commands. For instance, when it lists identity as “SERVER\EWS (Default Web Site)” you need to make sure that you specify the identity as such.
You can fix the rest by going into the console, Server Configuration, Client Access, and use the tabs on the lower portion of the screen. I may be forgetting something, in which case I will edit this.