Fix Exchange 2016 SMTP Error 5.7.57 on Port 587
Question details
The user needs to resolve an SMTP Error 5.7.57 on port 587 in Exchange 2016 following an SSL certificate update in a hybrid environment.
- Product
- Microsoft Exchange 2016
- Device & OS
- not provided
- Scenario
- Updating an SSL certificate in a Microsoft Exchange hybrid environment.
- Observed behavior
- Authenticated SMTP submissions on port 587 are rejected with error 5.7.57, while anonymous or relay traffic on port 25 continues functioning correctly.
Ensure you have administrative access to the Exchange Admin Center (EAC) and the Exchange Management Shell before modifying connector or certificate configurations.
Review Receive Connectors and TLS Configuration
Check your Exchange receive connectors and ensure the newly updated SSL certificate is correctly bound to your SMTP services.
When an SSL certificate is updated, Exchange does not always automatically apply the new certificate's TLS name to existing receive connectors. A mismatch between the certificate and the Client Frontend connector can cause authentication failures on port 587.
Launch the Exchange Management Shell as an administrator on your Exchange 2016 server.
Run 'Get-ExchangeCertificate' to confirm that the new SSL certificate is installed and properly bound to the SMTP service.
Use 'Get-ReceiveConnector' to verify that the Client Frontend receive connector (handling port 587) has the correct TlsCertificateName matching the updated certificate.
Restart the Microsoft Exchange Transport service from the Windows Services console to ensure the new certificate changes take effect immediately.
Consult the Microsoft Exchange Hybrid Management Forum
For complex hybrid configurations, reach out to specialized Microsoft engineers for dedicated troubleshooting.
Looking for a Lightweight, Cost-Effective Office Suite?
While troubleshooting complex Exchange server and connectivity issues, consider equipping your organization with WPS Office. It provides a lightweight, free alternative to Microsoft Office, offering exceptional compatibility and a familiar interface.
- 1. Download the software: Visit the official WPS website and download the free WPS Office installation package.
- 2. Install and launch: Follow the on-screen instructions to install the suite and open the application.
- 3. Configure your email: Open WPS Mail and enter your Exchange credentials to seamlessly access your inbox and calendar.
Frequently Asked Questions
What causes SMTP Error 5.7.57 on port 587 in Exchange 2016?
This error often occurs when the mail client fails to establish a secure TLS connection with the Exchange server. It is commonly triggered by mismatched, expired, or improperly bound SSL certificates following a server update.
Why does email traffic on port 25 work while port 587 fails?
Port 25 is typically configured for server-to-server mail routing or anonymous relaying within internal networks, which might not enforce the same strict TLS client authentication that port 587 requires for authenticated user submissions.
How do I correctly bind an SSL certificate to SMTP in Exchange 2016?
You can assign the certificate to the SMTP service by navigating to Servers > Certificates in the Exchange Admin Center (EAC), or by running the Enable-ExchangeCertificate cmdlet with the -Services SMTP parameter in the Exchange Management Shell.
