Do not use Secure Sockets Layer only for cluster virtual servers (241626)


The information in this article applies to:

  • Microsoft Exchange 2000 Server
This article was previously published under Q241626

SUMMARY

When you run Microsoft Exchange 2000 Server on a Windows 2000 Cluster, ensure that the virtual servers (POP3, SMTP, IMAP) are not set to authenticate over Secure Sockets Layer (SSL) only.

MORE INFORMATION

Cluster server pings the ports of the Internet Information Services (IIS) to determine if the service is still running. The SSL connection returns data that the cluster server cannot understand, and the cluster server thinks that IIS is not working properly. This causes Cluster Server to improperly fail over Exchange 2000 services.

Note This limitation of Exchange clustering does not apply to Exchange 2003. The Require SSL setting can be configured on Exchange 2003 clusters without causing the IsAlive failure.
Modification Type:MinorLast Reviewed:4/25/2005
Keywords:kbinfo KB241626
©2004 Microsoft Corporation. All rights reserved.