SSL for my new SBS2011

Posted on 2014-08-18
Last Modified: 2014-08-18
I have a new SBS2011 setup and I want to Add a trusted Certificate for my users to use for their RWW.
I'm using the task pad in Windows Small Business Server 2011 Standard Console

When I select "Add a trusted certificate"
I use "I want to buy a certificate from a certificate provider"

This wizard automatically fills in the following information
I’m going to use organization name as an example:

"Verify the information for your trusted certificate"
Issued To:

Abc123 Organization




Why does it add remote. prefix?
does this mean my user will use tp log in?

If I change it to
Issued To:  (instead of

what wil my users browse to? ?
Question by:jsarinana
    LVL 56

    Accepted Solution

    When you run the internet address wizard and select the name, that wizard adds 'remote.' to the beginning by default. You sre given the option to change it in the wizard.

    The certificate wizard simply reads the setting used in the internet address wizard. If you change the name jn the certificate wizard, you *will* break things. The internet address wizard has already configured IIS and Exchange to use remote.* so you'd have a name mismatch.

    As far as why that is a default , most people want to go to their public website as shortened version of There is no good way to have point to a public web host *and* have point to a different server, since both key off the DNS record for Using allows for a different distinct DNS record so the usage can be cleanly separated.

    Now as a reminder, the remote.* is just a default. You can rerun the internet address wizard and change the default. But you cannot have point to one server and point to another. That is a limitation of DNS and is bot unique to windows or SBS.

    You could set up a redirect on your public website (if you have one) that tells a browser visiting to redirect to, and some folks do this. But for that scenario, your remote site is still technical so you wouldn't rerun the internet address wizard and you *would* want the certificate name to be since that is what the browser will eventually get redirected to.
    LVL 1

    Author Closing Comment

    Thanks Cliff
    got it

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    By default, Carbonite Server Backup manages your encryption key for you using Advanced Encryption Standard (AES) 128-bit encryption. If you choose to manage your private encryption key, your backups will be encrypted using AES 256-bit encryption.
    How to sign a powershell script so you can prevent tampering, and only allow users to run authorised Powershell scripts
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now