Solved

Self Signed certificate problem

Posted on 2014-07-18
4
223 Views
Last Modified: 2014-07-18
This is SBS 2008. Our self-signed certificate expired yesterday. I have used the 'Set up your internet address' wizard in the SBS console. I can see the new certificate is there, and it expires in July 2016.

My problem is that the client pc's dont seem to trust it. When anyone opens Outlook they get a certificate error stating that the certificate was issued by a company we have not chosen to trust.  When I look at the certificate, it is issued to remote.myexternaldomain.com and it is Issued by internaldomain-server-CA I've checked the expired certificate and it has the same information. So how do I fix this?
0
Comment
Question by:TownTalk
  • 2
  • 2
4 Comments
 
LVL 76

Assisted Solution

by:Alan Hardisty
Alan Hardisty earned 500 total points
Comment Utility
Install the new certificate onto every machine you have or buy a trusted 3rd party SSL certificate for $60 a year and then it will automatically be trusted and you don't have to install anything on any machine other than the server.
0
 

Author Comment

by:TownTalk
Comment Utility
But the self-signed should be trusted shouldn't it? I didn't have this problem when I re-issued the certificate 2 years ago.
0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 500 total points
Comment Utility
When the clients join the domain, the certificate gets installed onto their PC so it therefore trusts the server because it has the certificate installed.

Now it doesn't have the new certificate installed, so it doesn't trust the server.

Not sure what you did 2 years ago, but that's what you need to do.

Alan
0
 

Author Closing Comment

by:TownTalk
Comment Utility
Ah yes I understand now. Most of the machines are less than 2 years old, so they would have got the certificate when they were joined to the domain.  I've been around and installed the certificate, and I found that the problem wasn't occurring on the machines which are older than 2 years. So for whatever reason, they trust the certificate. I'm curious as to why this is the case, but my problem is fixed. So thanks guys for your input.

Ian
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

5 Experts available now in Live!

Get 1:1 Help Now