Link to home
Start Free TrialLog in
Avatar of Powerhousecomputing
Powerhousecomputing

asked on

Renew self-signed certificate in SBS 2008

This was a pretty easy thing to do in SBS 2003. How do you update the self-signed certificate in SBS 2008.
Avatar of Philip Elder
Philip Elder
Flag of Canada image

It's even easier.

Create the CSR under the Network --> Connectivity tab using the Trusted Third Party Certificates wizard.

Paste that into your SSL provider's CSR request setup.

Generate the cert.

Download the cert and use the Wizard to import.

Make sure to properly install the Intermediate certificates too.

Philip
Avatar of Powerhousecomputing
Powerhousecomputing

ASKER

im trying to run this cmdlet but get nothing. Get-ExchangeCertificate |FL

what am i doing wrong? i am logged in as domain admin
Where are you running this command? This needs to run in powershell.
ASKER CERTIFIED SOLUTION
Avatar of Philip Elder
Philip Elder
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Just a remark:
Definitelly I suggest using wizard. I SBS Console --> Network --> Connections you have menu on right, and your self-signed certificate will be renewed either via Internet Connection Wizard or via Fix My Networking wizard. I recommend the latest.
Labsy,

Thank you!  Using the wizard under the SBS Console --> Network --> Connectivity tab.  Then clicking on the "Fix my network" under the Connectivity Tasks renewed my self-signed certificate for another year and a half.  Is there away to get a longer renewal?
After you use the wizard to renew the self-signed certificate, how do you distribute that new certificate to your outside users? The wizard does not appear to update the certificate located in:
\\server\Public\Downloads\Certificate Distribution Package
   or in the file:
\\server\Public\Downloads\Install Certificate Package.zip
The new certificate structure means that what you just generated is called a leaf certificate.

Everyone out there should not have to update the root certificate structure once installed.

Philip