Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Web sites not working on SBS 2008 after certificate renewal

Posted on 2012-04-03
17
Medium Priority
?
867 Views
Last Modified: 2012-05-20
We have a server running Microsoft Windows Small Business Server 2008. We were getting alerts that the certificate was going to expire so based on troubleshooting guides I found, I ran the Fix My Network wizard to perform the certificate renewal successfully.

Now, however, none of the web sites (OWA, sharepoint, Blackberry Admin) are accessible. The Blackberry Enterprise Server is the most important and I verified that those services are still running. And if log on to the server using the besadmin account, I can open the administrative web page but from any other machine on the network, I can't. This is important because we do phone provisioning via USB cable and we can't keep going to the server to do this.

Help!
0
Comment
Question by:twinstatevdv
  • 9
  • 6
  • 2
17 Comments
 
LVL 9

Expert Comment

by:Geodash
ID: 37803191
Rerun the "Configure your internet address" wizard in the sbs console, see if this fixes it.

Make sure you are at the console because you may loose connectivity intermittently while this is happening.
0
 
LVL 9

Expert Comment

by:Geodash
ID: 37803203
see if you can ping the FQDN of the BES server internally and externally
0
 
LVL 9

Expert Comment

by:Geodash
ID: 37803214
Also, did you run the "Add a trusted Certificate" wizard in the SBS console to re-add the new cert?
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 

Author Comment

by:twinstatevdv
ID: 37808287
I had already run the Configure Your Internet Address wizard and that did not resolve the blackberry admin site or the companyweb site. I can, for some reason, get to the OWA site though.

I ran the Fix My Network wizard to install the certificate.
0
 
LVL 9

Expert Comment

by:Geodash
ID: 37808291
so can BES be pinged internally and externally? by FQDN?
0
 

Author Comment

by:twinstatevdv
ID: 37808322
yes, it can be pinged by FQDN
0
 
LVL 11

Expert Comment

by:Sanjay Santoki
ID: 37811856
Hello,

What is the exact error you are getting while accessing the website? Please disable friendly error message from within your browser's settings and disable custom error from web.config to find out exact error.

Regards,
Sanjay Santoki
0
 

Author Comment

by:twinstatevdv
ID: 37811860
where do I disable custom error from web.config?
0
 
LVL 11

Expert Comment

by:Sanjay Santoki
ID: 37811875
Hello,

I am not good at coding so lets do it from the IIS manager, open IIS manager -> Click On the website -> Custom error -> Edit Feature from right side -> Detailed.

For internet explorer, Tools -> Internet Option -> Advanced -> untick show friendly error message

Regards,
Sanjay Santoki
0
 

Author Comment

by:twinstatevdv
ID: 37823134
I believe I set the options as you mentioned. When I browse to https://companyweb , I get the following:

HTTP Error 403.14 - Forbidden
The Web server is configured to not list the contents of this directory.

A default document is not configured for the requested URL, and directory browsing is not enabled on the server.


When trying to browse to the BB admin page at https://servername.domain.local:3443/webconsole/login , I get the following:

Internet Explorer cannot display the webpage
0
 

Author Comment

by:twinstatevdv
ID: 37823144
one other note. I mentioned earlier that if I log in to the server using the besadmin account, I can successfully browse to the BB admin page (https://servername.domain.local:3443/webconsole/login). On the same server, if I log in using the administrator account and go to the BB admin page, I get the Internet Explorer cannot display the webpage error. ???
0
 
LVL 9

Expert Comment

by:Geodash
ID: 37823769
Have you chhecked the permission in IIS for that website?

Take a look here-
http://www.tek-tips.com/viewthread.cfm?qid=1596592
0
 

Author Comment

by:twinstatevdv
ID: 37839277
I will check that out shortly. Thanks!
0
 

Author Comment

by:twinstatevdv
ID: 37839399
I am trying to follow that thread but I am having trouble finding the SSL settings they are referring to. On another note, I found that I am getting this message when trying to browse to a number of pages on the SBS server:

HTTP/1.1 200 OK Server: Microsoft-IIS/7.0 Date: Thu, 12 Apr 2012 18:44:05 GMT Connection: close

Does that mean anything?
0
 
LVL 9

Expert Comment

by:Geodash
ID: 37839409
0
 

Accepted Solution

by:
twinstatevdv earned 0 total points
ID: 37867656
we have not been able to get this to work on the Blackberry admin page and have determined we will need to contact Blackberry technical support. This is a production system and can't afford to be tinkered with any further.
0
 

Author Closing Comment

by:twinstatevdv
ID: 37989527
not really a solution
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

926 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question