Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Certificate warning in Outlook 2016 for Mac

Certificate warning in Outlook 2016 for Mac

View products that this article applies to.

Symptoms

Assume that Microsoft Outlook 2016 for Mac performs an Autodiscover operation. For example, Outlook performs an Autodiscover operation during Outlook start or periodically while Outlook runs. In this scenario, you may receive a warning message that resembles the following:

A secure connection cannot be established with the server <domain.com> because its intermediate or root certificate cannot be found. Do you want to continue?

If you continue, the information that you view and send will be encrypted, but will not be secure.

Verify Certificate warning message

When you receive this warning message, you can click Continue to accept the warning. However, the warning may reappear the next time that Autodiscover runs.

↑ Back to the top

Cause

This issue occurs in Outlook 2016 for Mac version 15.9 and later versions when Outlook performs an Autodiscover operation and tries to connect to a service endpoint whose expected name is not present on the server's Secure Sockets Layer (SSL) certificate.

↑ Back to the top

Resolution

To resolve this issue, use one of the following methods:

Method 1

Reissue a certificate that includes the domain name as the Subject Alternative Name. This enables you to resolve the issue for all Outlook for Mac clients without having to trust the certificate from each client individually.

Method 2

Trust the certificate on the Mac client. This solution enables you to resolve the issue quickly for individual Mac clients without having to reissue the certificate.
  1. When you receive the certificate warning message, click Show Certificate.
  2. Select the Always trust <https://www.domain.com> when connecting to <domain.com> check box, and then click Continue.

    Always trust the certificate option after clicking Show Certificate

↑ Back to the top

More Information

As an example, consider the domain Contoso.com. This domain has an SSL certificate configured for the domain Wingtiptoys.com. When Outlook 2016 for Mac performs Autodiscover, it uses the domain name part of the user's SMTP address to query DNS. In this example, it tries to connect the URL https://contoso.com/Autodiscover/Autodiscover.xml, and it expects the certificate for the top-level domain Contoso.com. However, Outlook receives the certificate that is named Wingtiptoys.com. The certificate name mismatch causes Outlook to present the warning that is mentioned in the "Symptoms" section.

When you view the details of the certificate by clicking Show Certificate, you see a warning message in the certificate details that states the following:

This certificate is not valid (host name mismatch)

Certificate Details states host name mismatch

If you receive a certificate warning that resembles this warning but does not contain the phrase "host name mismatch," method 1 in the "Resolution" section may not resolve the issue.

For more information about how the Autodiscover service works with Outlook for Mac, see the following Microsoft TechNet article:
How the Autodiscover service works with Outlook for Mac 2011

↑ Back to the top

Keywords: kb

↑ Back to the top

Article Info
Article ID : 3066652
Revision : 2
Created on : 5/20/2019
Published on : 5/20/2019
Exists online : False
Views : 266