MSExchangeTransport 11015

上一次修改主题： 2011-03-19

本文对特定 Exchange 事件进行了说明并提供了可能的解决方案。如果您在此处未找到所需内容，请尝试在 Exchange 2010 帮助中进行搜索。

Details

Explanation

This Error event indicates that a domain that is specified in the TransportConfig object as a domain-secured domain has sent a message that has a certificate that does not contain a valid domain name. To authenticate with Domain Security, the certificate that is used for the Transport Layer Security (TLS) session must include the fully qualified domain name (FQDN) of the domain in the Subject or Subject Alternative Name fields.

User Action

To resolve this error, you must perform one of the following tasks:

• Disable Domain Security for the domain.

• Contact the administrator of the domain and request that the administrator create a valid TLS certificate for the domain.

Disabling Domain Security

To disable Domain Security for the remote domain, you must remove the domain name from the TLSReceiveDomainSecureList parameter in the Set-TransportConfig cmdlet. If you have not configured dedicated Receive connectors for the domain, you can disable Domain Security for that domain by removing the domain name from the TransportConfig object.

If you are using dedicated Send connectors and Receive connectors for the domain-secured mail flow path, disable the connectors by setting the Enable parameter to $False on both the Set-ReceiveConnector cmdlet and the Set-SendConnector cmdlet. Mail flow from this specific domain will then flow through your default Send connectors and Receive connectors.

For more information, see the following topics:

• Set-TransportConfig

• Set-ReceiveConnector

• Set-SendConnector

For More Information

如果您尚未执行此操作，请考虑运行 Exchange 工具，已创建这些工具以帮助您分析 Exchange 环境并对其进行疑难解答。这些工具可帮助确保您的配置与 Microsoft 最佳实践保持一致。它们还可以帮助您识别和解决性能问题，并改进邮件流。若要运行这些工具，请转到 Exchange 管理控制台的“工具箱”节点。若要了解有关这些工具的详细信息，请参阅管理工具箱中的工具。