I have several Outlook clients on the internal network pointing to the internal DNS name of the Exchange 2010 SP1 R2 server.
The name we're using is exchange2.example.local
.
Since new guidelines have been adopted, CAs will no longer issue SSL certificates for domains in the TLD .local
. This means that I can no longer get a working SSL certificate for this hostname, and the Outlook clients are frequently popping up a Security Alert Popup.
Is there any way to keep Outlook from requiring and verifying a certificate to get mail from Exchange for internal clients that are on the same network as the Exchange server? I don't need this extra layer of security anyways, since all of the clients are protected by the internal network security layers.