You receive a "The name of the security certificate is invalid or does not match the name of the site" warning when you try to connect Outlook 2007 to Small Business Server 2008

To resolve this issue, use the following methods.

Method 1: Use the Internet Address Management Wizard

To resolve this issue, follow these steps:

1. Run the Internet Address Management Wizard (IAMW) by using the Windows Small Business Server 2008 (Windows SBS) console.
2. Run the Add a Trusted Certificate Wizard from Windows SBS Console.
   

For more information about how to use the IAMW and the Add a Trusted Certificate Wizard in Small Business Server 2008, see the following TechNet Blog posts:
If you still receive the security warnings after you follow these steps, use Method 2.

Method 2: Change the URLs for the appropriate Exchange 2007 components

To do this, follow these steps:


Note On Small Business Server 2008, Exchange 2007 is installed as a part of the Out of the Box Experience (OOBE) Setup. When you install, all the virtual directories that relate to Exchange are created under a Web site that is named "SBS Web Applications" instead of "Default Web Site." This Web site is configured to listen on port 443 for secure http requests and has a certificate binding that can be a self-issued certificate or public certificate.

1. Click
   Start, point to
   All Programs, point to
   Exchange Server 2007, and then click
   Exchange Management Shell.
   
2. Change the Autodiscover URL in the Service Connection Point. The Service Connection Point is stored in the Active Directory directory service.
   1. At the command prompt, run the following cmdlet:
      
      Set-ClientAccessServer -Identity CAS_Server_Name -AutodiscoverServiceInternalUri https:// mail .contoso.com/autodiscover/autodiscover.xml
3. Change the InternalUrl attribute of the EWS.
   1. At the command prompt, run the following cmdlet:
      
      
      Set-WebServicesVirtualDirectory -Identity "CAS_Server_Name \EWS (SBS Web Applications)" -InternalUrl https:// mail .contoso.com/ews/exchange.asmx
4. Change the InternalUrl attribute for Web-based Offline Address Book distribution.
   1. At the command prompt, run the following cmdlet:
      
      
      Set-OABVirtualDirectory -Identity "CAS_Server_name \oab (SBS Web Applications)" -InternalUrl https:// mail .contoso.com/oab
      
5. Change the InternalUrl attribute of the UM Web service.
   1. At the command prompt, run the following cmdlet:
      
      
      Set-UMVirtualDirectory -Identity "CAS_Server_Name \unifiedmessaging (SBS Web Applications)" -InternalUrl https://mail .contoso.com/unifiedmessaging/service.asmx
   Note This command is required only in an Exchange 2007 environment.
   
6. Click Start, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
7. Expand the local computer, and then expand Application Pools.
   
8. Right-click MSExchangeAutodiscoverAppPool, and then click Recycle.
   

Important These steps assume that a host record exists in the DNS to map the FQDN that you specify to the IP address of the CAS server. For example, consider the following scenario:

• The original internal URLs for the Exchange components point to the internal FQDN of the server. For example, one of these URLs points to the following:
  
  https://ServerName.contoso.com/ews/exchange.asmx
• The FQDN that is specified on the certificate points to the externally-accessed host name of the server. For example, the certificate specifies an FQDN, such as "mail.contoso.com."
  

In this scenario, you must add a host record for the mail host name that is mapped to the internally-accessed IP address of the CAS server to let internal clients access the server.