<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Turns out I didn’t need to download SSL Cert to UC8.5. ASA8.2 needed a reboot as counters weren’t incrementing and had others issues (the Exchange CAS is in the DMZ). I also had the wrong ip address for the Exchange CAS. Using RTMT to pull the Tomcat log was helpful, as well as just doing a <a href="https://exchangecasip/EWS/Exchange.ASMX">https://exchangecasip/EWS/Exchange.ASMX</a> and also using the MSDN ESW Editor tool and attempting to login to mailbox.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> cisco-voip-bounces@puck.nether.net [mailto:cisco-voip-bounces@puck.nether.net] <b>On Behalf Of </b>Jason Aarons (AM)<br><b>Sent:</b> Thursday, May 26, 2011 2:58 PM<br><b>To:</b> cisco-voip (cisco-voip@puck.nether.net)<br><b>Subject:</b> [cisco-voip] Troubleshooting Unity Connection 8.5 - Exchange single inbox (Unified Messaging Services)<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p><p class=MsoNormal>How do I download the SSL cert from the Exchange 2007 Client Access Server and install them in Unity Connection? I assume this is the same cert that Outlook Web Access uses. The Client Access Server is in the DMZ and the ASA has permit rules. The Exchange CAS is in production with OWA/ActiveSync, etc.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Clicking on Test under the Unified Messaging Services gives this<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> The validation results for unified messaging service OBA-Exchange are the following: Service "OBA-Exchange": AuthenticationMode=[NTLM] [use HTTPS/no-validate] Server=[172.20.100.32] Type=[Exchange 2007/2010] Username=[service_account]<o:p></o:p></p><p class=MsoNormal> Server 172.76.100.32 cannot be contacted by pinging. Confirm that the systems service ports are functioning. This check uses a low level protocol, such as ICMP ECHO, and may not work through firewalls.<o:p></o:p></p><p class=MsoNormal> The service port for calendaring is not functioning. <o:p></o:p></p><p class=MsoNormal> The system failed to connect to 172.76.100.32:443 through SSL within 60 seconds.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>On the Client Access Server, in IE should I be able to go to <a href="https://172.20.100.32/EWS/Exchange.ASMX">https://172.20.100.32/EWS/Exchange.ASMX</a> ? I don’t get a response on that web page on the CAS server itself.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Testing from Subscriber;<o:p></o:p></p><p class=MsoNormal> Failed accessing <a href="mailto:jaarons@acme.com">jaarons@acme.com</a> on 172.20.100.32 Some possible reasons for 503: Server busy. Service offline. Attempting access using HTTPS when HTTP is required. HTTP status=[503 Service Unavailable] Diagnostic=[Couldn't connect to server -- couldn't connect to host] Verb=[POST] url=[https://172.20.100.32/EWS/Exchange.ASMX] request=[<?xml version="1.0" encoding="utf-8"?> <soap:Envelope xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xmlns:xsd="<a href="http://www.w3.org/2001/XMLSchema">http://www.w3.org/2001/XMLSchema</a>" xmlns:soap="<a href="http://schemas.xmlsoap.org/soap/envelope/">http://schemas.xmlsoap.org/soap/envelope/</a>" xmlns:t="<a href="http://schemas.microsoft.com/exchange/services/2006/types">http://schemas.microsoft.com/exchange/services/2006/types</a>"> <soap:Header> <t:RequestServerVersion Version="Exchange2007_SP1"/> <t:ExchangeImpersonation> <t:ConnectingSID> <t:PrimarySmtpAddress><a href="mailto:jaarons@acme.com%3c/t:PrimarySmtpAddress">jaarons@acme.com</t:PrimarySmtpAddress</a>> </t:ConnectingSID> </t:ExchangeImpersonation> </soap:Header> <soap:Body> <GetFolder xmlns="<a href="http://schemas.microsoft.com/exchange/services/2006/messages">http://schemas.microsoft.com/exchange/services/2006/messages</a>" xmlns:t="<a href="http://schemas.microsoft.com/exchange/services/2006/types">http://schemas.microsoft.com/exchange/services/2006/types</a>"> <FolderShape> <t:BaseShape>Default</t:BaseShape> </FolderShape> <FolderIds> <t:DistinguishedFolderId Id="deleteditems"> <t:Mailbox> <t:EmailAddress><a href="mailto:jaarons@acme.com%3c/t:EmailAddress">jaarons@acme.com</t:EmailAddress</a>> </t:Mailbox> </t:DistinguishedFolderId> </FolderIds> </GetFolder> </soap:Body> </soap:Envelope> ] response=[]<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><a href="http://www.cisco.com/en/US/docs/voice_ip_comm/connection/8x/unified_messaging/guide/85xcucumg020.html">http://www.cisco.com/en/US/docs/voice_ip_comm/connection/8x/unified_messaging/guide/85xcucumg020.html</a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Confirming Exchange 2007 Authentication and SSL Settings for Cisco Unity Connection 8.5 and Later<o:p></o:p></p><p class=MsoNormal style='text-indent:.5in'>You must download SSL certificates from the Exchange server and install them on the Connection server.<o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><br><br><span style='color:white'>itevomcid</span> <o:p></o:p></span></p></div></body></html>