XADM: KM Server Issues V1 Certificate When Configured to Issue V3 Only (231307)

The information in this article applies to:

Microsoft Exchange Server 5.5

This article was previously published under Q231307

SYMPTOMS

If you configure a Key Management (KM) server to issue X.509 V3 certificates only, the server may still issue V1 certificates when e-mail clients request them. This problem is known to occur with the Microsoft Exchange client versions 4.0 and 5.0, and Microsoft Outlook 97, but the problem can occur with any e-mail client that only uses V1 certificates.

CAUSE

When an e-mail client requests a certificate from a KM server, the server does not verify that the request is compatible with its current configuration.

RESOLUTION

To resolve this problem, obtain the latest service pack for Exchange Server version 5.5. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

191014 XGEN: How to Obtain the Latest Exchange Server 5.5 Service Pack

Component: Key Management

File name	Version
Kmserver.exe	5.5.2606.0
Kmsmsg.dll	5.5.2606.0

STATUS

Microsoft has confirmed that this is a problem in Microsoft Exchange Server version 5.5. This problem was first corrected in Exchange Server 5.5 Service Pack 3.

Modification Type:	Minor	Last Reviewed:	4/21/2005
Keywords:	EXC55SP3Fix kbbug kbnofix KB231307