Partager via

MSExchangeTransport 11013

  • Article

 

Dernière rubrique modifiée : 2011-03-19

Cet article fournit une explication et d’éventuelles solutions en ce qui concerne un événement Exchange spécifique. Si vous ne trouvez pas ce que vous cherchez ici, essayez Aide d’Exchange 2010.

Details

Product Name

Exchange

Product Version

14.0

Event ID

11013

Event Source

MSExchangeTransport

Category

MessageSecurity

Symbolic Name

MessageToSecureDomainFailedDueToTlsNegotiationFailure

Message Text

The connection to secure domain '%1' on connector '%2' failed because Transport Layer Security (TLS) negotiation was unsuccessful. Error: '%3'. Please contact the administrator of %1 to resolve the problem.

Explanation

This Error event indicates that a certificate validation error has occurred with a domain that is configured for Domain Secure e-mail.

User Action

To resolve this error, you must perform one of the following tasks:

  • Disable Domain Security for the domain.
  • Contact the administrators of the remote domain and inform them that the Transport Layer Security (TLS) certificate that they are using must be fixed. The administrators of the remote domain should refer to the Microsoft Exchange Server 2010 Help topic Dépannage des erreurs de validation de certificat for more information about how to troubleshoot the certificate validation errors. The certificate validation error referenced in this Error event is caused by an error from the TLS certificate of the remote domain, not from the TLS certificate of your organization.

Disabling Domain Security

To disable Domain Security for the remote domain, you must remove the domain name from the TLSReceiveDomainSecureList parameter in the Set-TransportConfig cmdlet. If you have not configured dedicated Receive connectors for the domain, you can disable Domain Security for that domain by removing the domain name from the TransportConfig object.

If you are using dedicated Send connectors and Receive connectors for the domain-secured mail flow path, disable the connectors by setting the Enable parameter to $False on both the Set-ReceiveConnector cmdlet and the Set-SendConnector cmdlet. Mail flow from this particular domain will then flow through your default Send connectors and Receive connectors.

For more information, see the following topics:

For More Information

Si ce n’est pas encore le cas, songez à exécuter les outils Exchange conçus pour vous aider à analyser et dépanner votre environnement Exchange. Ces outils peuvent vous aider à vérifier que votre configuration est conforme aux meilleures pratiques de Microsoft. Ils peuvent également vous aider à identifier et résoudre les problèmes de performance et à améliorer le flux de messages. Pour exécuter ces outils, allez dans le nœud Boîte à outils de la console de gestion Exchange. Pour en savoir plus sur ces outils, consultez la rubrique Gestion des outils de la boîte à outils.