Solved

sbs2011 certifficate problem

Posted on 2014-02-18
2
331 Views
Last Modified: 2014-02-18
We have single sbs2011 server running exchange. I noticed yesterday that on of our locally issued certifficates was due to expire.

The one in question was :- servername.domainname.local issued by domainname-servername-CA.

I right clicked the certifficate and chose renew. It seemd to process OK and now says that it is valid.

Today I came in and the server is reporting - "An internal transport certificate expired. Thumbprint:A10260BE011C3FA3CCFF16356294FDD76EBFB00F"

and then

There is no valid SMTP Transport Layer Security (TLS) certificate for the FQDN of Servername.domainname.local. The existing certificate for that FQDN has expired. The continued use of that FQDN will cause mail flow problems. A new certificate that contains the FQDN of servername.dmainname.local should be installed on this server as soon as possible. You can create a new certificate by using the New-ExchangeCertificate task.

In our event log.

I can see the actual certifficate in question on both the IIS manager and the EMC, and it is reported as having expired.

I have tried to renew this locally by right clicking the certifficate and choosing renew, but unlike yesterday, I am told that it is being submitted to an online authority but was denied.

I am a little confused here, as we already have an SSL in place for our owa access etc ie remote.domainname.co.uk and am unsure about why this locally held certifficate is not being renewed locally??

What am I doing wrong?

Any advice much appreciated.
0
Comment
Question by:nigelbeatson
2 Comments
 
LVL 14

Accepted Solution

by:
Don Thomson earned 500 total points
ID: 39867183
In your SBS console - Goto Network - far right tab and run fix my network - It should find the expired Cert  and re-issue it
0
 

Author Closing Comment

by:nigelbeatson
ID: 39867190
Thats great - many thanks
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now