DOCUMENT:Q193384 05-MAR-2002 [exchange] TITLE :XGEN: Internet Security & Exchange: Top 5-10 Issues & Solutions PRODUCT :Microsoft Exchange PROD/VER::5.0,5.5 OPER/SYS: KEYWORDS: ====================================================================== ------------------------------------------------------------------------------- The information in this article applies to: - Microsoft Exchange Server, versions 5.0, 5.5 ------------------------------------------------------------------------------- SUMMARY ======= This article discusses the top five to ten issues with setting up Internet Security and Exchange Server, along with references to Knowledge Base articles and other solutions. This article is part of an on-going process, and will be updated monthly to stay accurate. Feed back is welcome to Karelde@microsoft.com or Joerich@microsoft.com. Current as of 9/14/98 MORE INFORMATION ================ - How to install Exchange Server 5.5 with support for V1 and V3 Certificates for S/MIME and Public/Private Key encryption (Signing and Sealing Mail Messages). Installation requires the use of Certificate Authority (CA) 1.0 in Internet Information Server 4.0 that comes in the Windows NT 4.0 Option Pack. Additionally, this version requires the updated CA Server. For additional information, see the following articles in the Microsoft Knowledge Base. Q192044 Setting Up X509v3 Certs on Exch 5.5 SP1 KMS with Local Cert Srv Q184695 Readme Notes for Certificate Server Update - How to set up Secure Socket Layers (SSL)/Transport Layer Security (TLS) between Exchange Server 5.0 or 5.5 and Internet e-mail clients, POP3, IMAP4, NNTP, HTTP, SMTP. For additional information, see the following article in the Microsoft Knowledge Base. Q175439 : XFOR: Enabling SSL For Exchange Server - How to set up SSL/TLS between Exchange Server and other SMTP (non- Exchange Server) host. This requires enabling SSL for the SMTP protocol first. For instructions, see the following article in the Microsoft Knowledge Base, but select SMTP as the Protocol to be used in Key Manager. Q175439 : XFOR: Enabling SSL For Exchange Server For additional information, see the following articles in the Microsoft Knowledge Base. Q174754 : XFOR: Connecting IMS to IMS with SASL - When you use Microsoft Outlook Express to connect to Microsoft Exchange Server, version 5.0 with Service Pack 1 installed, the information store may stop responding (crash). Fixed in the latest service pack. For additional information, see the following article in the Microsoft Knowledge Base. Q166627 : XCLN: Outlook Express Crashes Store When SSL Is Used - If you configure the Internet Mail Service on two Microsoft Exchange Server computers to use Secure Sockets Layer (SSL) without authentication, you may receive a non-delivery report (NDR) when you attempt to send mail from one server to another through the Internet Mail Service. The text of the NDR includes a 505 error, and indicates that authentication is required for the message to be delivered. Fixed in the latest service pack for 5.5. For additional information, see the following article in the Microsoft Knowledge Base. Q181481 : XFOR: Non-Delivery Report When Using SSL Without Authentication - On July 17, 1998, Microsoft released an updated version of Schannel.dll. This latest version provides the following benefits: Updates the Schannel.dll used by IIS and Exchange Server for encryption. For additional information, see the following article in the Microsoft Knowledge Base. Q148427 : Generic SSL (PCT/TLS) Updates for IIS and MS Internet Products Additional query words: ====================================================================== Keywords : Technology : kbExchangeSearch kbExchange500 kbExchange550 kbZNotKeyword2 Version : :5.0,5.5 Issue type : kbinfo ============================================================================= THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. Copyright Microsoft Corporation 2002.