When I open outlook on a workstation, I get a security alert, need help to resolve this also 2 of the workstations in the domain shown as offline

I have a small network with SBS 2011 with 5 workstations. Using outlook 2010 for email. Everything has been working fine and suddenly I have started getting the pop up when start Outlook on any of the workstations - "Security alert" remote.konidas.com.au -InformationSecurity alert
I have tried "view certificate" and install as trusted certificate, but it does nothing. At this stage I do not want to purchase commercial certificate. I want to create self assigned certificate as mostly the email are used in-house.

 Security alertCan someone give me some guidance please to fix this?

Also 2 of the workstations always show offline status on SBS console even if they are online. They are receiving email and able to connect to server directories. I have even accounts and reconnected them. I need some assistance in this please.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MacleanSystem EngineerCommented:
A certificate from a trusted provider is so cheap that it easily outweighs any reasons for not implementing it.
The time spend trying to get things working with self signed certs will be more costly than getting it done the way it was meant to be from starters. I think its approx $80-90 USD per year average, compare that vs hourly wages and time spend on getting self signed working, and one would easily reap the benefits straight away unless your time has no cost attached to it :)

There are even some free SSL providers online such as StartSSL.

What you need to do when using self signed is write a group policy that imports the self signed root certificates into the trusted store.


The second problem that the cert shows is that your URL is incorrectly configured on the certificate.
The below article describes how to rectify this

Shaun-1Author Commented:
What was the reason for it work OK before without this issue? What I could have done to make it to wake up?
I have another installation similar to this, I may have to get ready for that as well? I will try and follow the links above to solve the issue.
MacleanSystem EngineerCommented:
Did you recently change from a paid SSL cert to a self signed one?
If changes are made to the certificate, but the IIS Service is not restarted on Exchange, than it can take some time before the change becomes obvious to the clients.

But there are more potential variables which could impact this. I would go through the system and application logs to find if anything obvious was changed in the past week.
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Shaun-1Author Commented:
The installation of sbs 2011was done by someone else. I have just inherited it. As far as I am aware we never had a paid certificate. While following the procedure,

"Follow the instructions in the Certificate Import Wizard to find and import the certificate"
I have no certificate, so tried to create one led me to Exchange Management Console here I do not see server configuration, I guess it has got something to do permissions, I have logged in as Administrator? What else?
Anything to do with OUTLOOK 2010 installation on server?
MacleanSystem EngineerCommented:
Outlook 2010 should preferably not be installed on the Exchange Server if this is what you are implying.
It is not a recommended scenario. although I cannot locate a reason explaining why this is not recommended. by Microsoft, and what the impact of that could be. "If in doubt, don't" would be my rule of thumb.

Your certificate should be visible on either your IIS console under certificates on the Exchange server (See here ), or you can browse to the mmc.msc snap in (See here )

Found a MS article showing where on exchange you can locate certificate details as well


If not familiar with Exchange I would recommend having a full server snapshot just in case anything goes wrong and you are required to revert changes.
Shaun-1Author Commented:
Hmm! looks like I have a bit of work to do.
MacleanSystem EngineerCommented:
Yes, for this reason having a $80-90 dollar signed certificate from GoDaddy or other, would be a better and more secure option, which should save you more time and money than trying fix it with less secure self signed certificates
Shaun-1Author Commented:
Do you mean I do not need to go through all the hassles? Could you please forward me a link which I can follow to successfully install a SSL certificate on server SBS 2011?
MacleanSystem EngineerCommented:
Step 1: https://support.godaddy.com/help/article/6086/generating-a-certificate-signing-request-csr-exchange-server-2010?countrysite=nz

Step 2: https://support.godaddy.com/help/article/5863/installing-an-ssl-certificate-in-microsoft-exchange-server-2010

You just need to make sure that you have all the proper server names used for in & external mail access such as e.g. webmail.domain.com This is more clearly displayed in the below article.

But again, if not sure what you are about to do, it might pay checking with a experienced MS Exchange technician to help out. Would hate for things to go wrong.
Shaun-1Author Commented:
Thank you for your guidance. It was very helpful.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Shaun-1Author Commented:
I am going to try and implement the solution given when it is possible. It is good when someone with experience is providing guidance to choose the right path.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.