Hi EE:
I just deployed SBS2008 with Exchange 2007
when using outlook 2007 on client workstation
the Certificat warning expired for my website (Hosting) where I purchased and installed LAST year!
When open outlooks it pop up warning on expired?!
how can I uninstall / remove / delete from client workstation
I am trying to use the self sign certificate from sbs2008 for now
please help
thank you
howien
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
To renew SBS2008 self signed certificate you have to do this:
1. Open IIS Manger Console and on left side click on your Machine-Name
2. Then an the middle of the Screen search for Servercertificates - doubleclick the item
3. You see a list of the certificates on you server - one should be named like [servername.domain.local] with the expired date
4. on the right side under Tasks select - Create self signed certificate
5. A wizard comes up - type in the name of your expired certificate like [servername.domain.local]
Now you have a NEW certificate in the list - delete the expired certificate
6. Now on the left side expand the SITE list an right click on SBS Sharepoint and select Bindings
Select the Entry where Type is HTTPS and click on Edit - Select the correct certificate from the dropdown
7. Repeate Step 6 with the Website: SBS Web Applications
8. Close the IIS Console
No action on the Clients and Exchange Server required.
Narayan_singh:
the Exchange Shell command is too new to me and I didn't get it from your post, sorry! I need help...
Mestha:
is there a solution from autodiscover setting you would like to offer me help?
wjaeger:
that's great! There's a little bit detail I missed in my question post...
I bought that expired certificate from 3rd party last year... it was intended for my domain name (www) hosting...
And, I done this "add a trusted certificate" from sbs2008 windows sbs console = from your post - is that the same as what I've already done for the server new certificate?
I will try these steps and get back to you!
all EE posters, thank you!
if the things were working fine you can just rene your certificate by typing the following command in the Exchange management shall
get-exchangecertificate -thumbprint xxxxxxxx |new-exchangecertificate
xxxxxxxxx=is th evalue of thumbprint of you existing certificate
to find the thumbprint
get-exchangecertificate
it will display all the certificate copy the thumbprint value of you exsisting certificate.
When you add a thrusted certificate in the SBS 2008 Console it adds the Certifiacte to the IIS Server and binds the Certificate to the two SBS Websites.
You added a expired thrusted certificate to the Site SBS Web Application with that and the Autodiscover Service will use this certificate and you will get the error.
By default Outlook 2007 checks for AutoDiscover under:
https://[netbios server name]/Autodiscover/Autodis
This is the SIte SBS Web Applications.
So you dont want to use a expired certificate on the Site "SBS Web Application".
Use the self signed one. A warning when accessing eg. OWA from outside will popup anyway.
Hope it helps you
wjaeger,
----
"You added a expired thrusted certificate to the Site SBS Web Application with that and the Autodiscover Service will use this certificate and you will get the error"
----
I must clarify...
I added a newly installed sbs2008 certificate from windows SBS console that will expire 08-2011
But the Outlook POP-UP shown / displayed expired certificate from third party vendor that was purchased for my website (domain hosting) last year on 08-2008.
I am working on that autodiscover service...
howien
Go to IIS Website > SBS web application > bindings on the right pane > click on 443 > edit > view
see if thats the correct certificate there if that isnt change it to the right one.
to change
Go to IIS Website > SBS web application > bindings on the right pane > click on 443 >edit and choose the certificate from drop down
do iisreset
The reason you are getting the certificate from your external service must be because one of the domains that Outlook attempts to use resolves to that location.
Simple test - ping autodiscover.example.com (where example.com is your public domain name). If it resolves to your public web site IP address, there is your problem.
This isn't an SSL problem, but a DNS issue.
Simon.
Business Accounts
Answer for Membership
by: Narayan_singhPosted on 2009-11-04 at 16:37:20ID: 25745742
you dont need to delete it from the client machine just renew the certificate on the server.
get-exchangecertificate -thumbprint xxxxxxxx |new-exchangecertificate