SSL Cert problem and Error 500 after install

Article
2017-07-08

Question

_{Saturday, July 8, 2017 6:09 PM}

Hello!

I've got serious problems with Exchange 2016 CU6 right after installation tried installation on 2012-R2 inside AD with .local domain (two times) and on server 2016 inside AD with fqdn (internal.fqdn) domain

In both cases error-500 on any attempt to open /ecp/ or /owa/ right after valid login, only warning in app log is IIS's warning about absent cert, it fires every time error 500 is raised. In both cases cert is self-signed, browser has trust root cert installed, only way to get inside /ecp/ on 2012-r2 server is to disable ssl and set vasic auth for ecp and owa folders (but still no way inside owa), on 2016 ecp is accesible via http://localhost/ecp/ (and not accesible via http://ip_address/ecp). I tried to re-generate certs via cli and via ecp - no luck.

Here is warning from app log:

Event code: 3005

Event message: An unhandled exception has occurred.

Event time: 08.07.2017 20:50:28

Event time (UTC): 08.07.2017 17:50:28

Event ID: 8b4bd43b25994e9da58071b8d8401bfa

Event sequence: 2

Event occurrence: 1

Event detail code: 0

Application information:

Application domain: /LM/W3SVC/2/ROOT/owa-5-131440098225190967

Trust level: Full

Application Virtual Path: /owa

Application Path: C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\owa\

Machine name: MAIL

Process information:

Process ID: 12444

Process name: w3wp.exe

Account name: NT AUTHORITY\SYSTEM

Exception information:

Exception type: TargetInvocationException

Exception message: Exception has been thrown by the target of an invocation.

at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor)

at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments)

at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

at Owin.Loader.DefaultLoader.<>c__DisplayClass12.<MakeDelegate>b__b(IAppBuilder builder)

at Owin.Loader.DefaultLoader.<>c__DisplayClass1.<LoadImplementation>b__0(IAppBuilder builder)

at Microsoft.Owin.Host.SystemWeb.OwinAppContext.Initialize(Action`1 startup)

at Microsoft.Owin.Host.SystemWeb.OwinBuilder.Build(Action`1 startup)

at Microsoft.Owin.Host.SystemWeb.OwinHttpModule.InitializeBlueprint()

at System.Threading.LazyInitializer.EnsureInitializedCore[T](T& target, Boolean& initialized, Object& syncLock, Func`1 valueFactory)

at Microsoft.Owin.Host.SystemWeb.OwinHttpModule.Init(HttpApplication context)

at System.Web.HttpApplication.RegisterEventSubscriptionsWithIIS(IntPtr appContext, HttpContext context, MethodInfo[] handlers)

at System.Web.HttpApplication.InitSpecial(HttpApplicationState state, MethodInfo[] handlers, IntPtr appContext, HttpContext context)

at System.Web.HttpApplicationFactory.GetSpecialApplicationInstance(IntPtr appContext, HttpContext context)

at System.Web.Hosting.PipelineRuntime.InitializeApplication(IntPtr appContext)

Encryption certificate is absent

at Microsoft.Exchange.Security.Authentication.Utility.GetCertificates()

at Microsoft.Exchange.Clients.Owa2.Server.Core.notifications.SignalR.SignalRStartup.Configuration(IAppBuilder app)

Request information:

Request URL: https://mail.internal.<FQDN Removed For Privacy>:444/owa/languageselection.aspx?url=/ecp/default.aspx

Request path: /owa/languageselection.aspx

User host address: fe80::3c34:bd2a:285:195508.07.2017 20:50:28

User:

Is authenticated: False

Authentication Type:

Thread account name: NT AUTHORITY\SYSTEM

Thread information:

Thread ID: 27

Thread account name: NT AUTHORITY\SYSTEM

Is impersonating: False

Stack trace: at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor)