Solved

Renew Self Signed Cert SBS 2008

Posted on 2014-09-22
3
298 Views
Last Modified: 2014-10-12
Good day folks. I received this error:

"There is no valid SMTP Transport Layer Security (TLS) certificate for the FQDN of SBSERVER01.mydomain.local. The existing certificate for that FQDN has expired. The continued use of that FQDN will cause mail flow problems. A new certificate that contains the FQDN of SBSERVER01.mydomain.local should be installed on this server as soon as possible. You can create a new certificate by using the New-ExchangeCertificate task."

A couple weeks ago I renewed the UCC SSL certificate for server.domain.com. And since there has been an "industry decision" to no longer include .local or intranet domain names within the SANs of SSL certificates, I'm now receiving an error about the self-signed certificate since my FQDN is server.domain.local

Normally this wouldn't be too big of a deal, but since we're dealing with SBS 2008 this makes the things a little different.

All of the AutoDiscover URLs, EWS, OAB, and critical virtual directories of Exchange are all pointed to the server.domain.com and not the .local. Yet the event viewer is still throwing up this error like it's going to cause a disruption in mail flow. I'm not sure I should believe it or not, but I'd like to at least renew the self signed cert.

I would normally accomplish this by using the SBS Console. However since SBS is wizard driven, I have a feeling generating a self signed cert through the "Add a trusted certificate" wizard, it will completely overwrite the cert I just renewed for the .COM.

Any advice would be greatly appreciated. Thank you.
0
Comment
Question by:cardscomp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 

Accepted Solution

by:
cardscomp earned 0 total points
ID: 40336470
I was able to resolve the issue simply by opening the Exchange Management Shell and running the "New-ExchangeCertificate" cmdlet.

It specifically said that "This certificate WILL NOT be used for external TLS connections" which is exactly what I wanted to avoid. Simply run that command and everything is good to go.
0
 
LVL 5

Expert Comment

by:nashim khan
ID: 40338892
Hi,

Please see the below link it will guide you for SBS.

http://www.petenetlive.com/KB/Article/0000535.htm

Thank you.
0
 

Author Closing Comment

by:cardscomp
ID: 40375474
It made the error go away.
0

Featured Post

[Webinar] How Hackers Steal Your Credentials

Do You Know How Hackers Steal Your Credentials? Join us and Skyport Systems to learn how hackers steal your credentials and why Active Directory must be secure to stop them. Thursday, July 13, 2017 10:00 A.M. PDT

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Written by Glen Knight (demazter) as part of a series of how-to articles. Introduction One of the biggest consumers of disk space with Small Business Server 2008(SBS) is Windows Server Update Services, more affectionately known as WSUS. For t…
I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question