<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>How do I download the SSL cert from the Exchange 2007 Client Access Server and install them in Unity Connection? I assume this is the same cert that Outlook Web Access uses. The Client Access Server is in the DMZ and the ASA has permit rules. The Exchange CAS is in production with OWA/ActiveSync, etc.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Clicking on Test under the Unified Messaging Services gives this<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> The validation results for unified messaging service OBA-Exchange are the following: Service "OBA-Exchange": AuthenticationMode=[NTLM] [use HTTPS/no-validate] Server=[172.20.100.32] Type=[Exchange 2007/2010] Username=[service_account]<o:p></o:p></p><p class=MsoNormal> Server 172.76.100.32 cannot be contacted by pinging. Confirm that the systems service ports are functioning. This check uses a low level protocol, such as ICMP ECHO, and may not work through firewalls.<o:p></o:p></p><p class=MsoNormal> The service port for calendaring is not functioning. <o:p></o:p></p><p class=MsoNormal> The system failed to connect to 172.76.100.32:443 through SSL within 60 seconds.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>On the Client Access Server, in IE should I be able to go to <a href="https://172.20.100.32/EWS/Exchange.ASMX">https://172.20.100.32/EWS/Exchange.ASMX</a> ? I don’t get a response on that web page on the CAS server itself.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Testing from Subscriber;<o:p></o:p></p><p class=MsoNormal> Failed accessing jaarons@acme.com on 172.20.100.32 Some possible reasons for 503: Server busy. Service offline. Attempting access using HTTPS when HTTP is required. HTTP status=[503 Service Unavailable] Diagnostic=[Couldn't connect to server -- couldn't connect to host] Verb=[POST] url=[https://172.20.100.32/EWS/Exchange.ASMX] request=[<?xml version="1.0" encoding="utf-8"?> <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types"> <soap:Header> <t:RequestServerVersion Version="Exchange2007_SP1"/> <t:ExchangeImpersonation> <t:ConnectingSID> <t:PrimarySmtpAddress>jaarons@acme.com</t:PrimarySmtpAddress> </t:ConnectingSID> </t:ExchangeImpersonation> </soap:Header> <soap:Body> <GetFolder xmlns="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types"> <FolderShape> <t:BaseShape>Default</t:BaseShape> </FolderShape> <FolderIds> <t:DistinguishedFolderId Id="deleteditems"> <t:Mailbox> <t:EmailAddress>jaarons@acme.com</t:EmailAddress> </t:Mailbox> </t:DistinguishedFolderId> </FolderIds> </GetFolder> </soap:Body> </soap:Envelope> ] response=[]<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><a href="http://www.cisco.com/en/US/docs/voice_ip_comm/connection/8x/unified_messaging/guide/85xcucumg020.html">http://www.cisco.com/en/US/docs/voice_ip_comm/connection/8x/unified_messaging/guide/85xcucumg020.html</a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Confirming Exchange 2007 Authentication and SSL Settings for Cisco Unity Connection 8.5 and Later<o:p></o:p></p><p class=MsoNormal style='text-indent:.5in'>You must download SSL certificates from the Exchange server and install them on the Connection server.<o:p></o:p></p></div></body></html>