Solved

Certificate Expired error thrown up by SBS2008 BPA

Posted on 2014-11-14
3
310 Views
Last Modified: 2014-12-13
We have a SBS 2008 and would like to do a migration to 2012 Essentials. When we run the SBS Best Practices Analyser on the SBS 2008, we get the following critical error:
"The ssl certificate for https://Companyweb:987 expired on 10/19/2011".
Following advice on some forums I ran the "Add a trusted Certificate" routine in the Windows SBS Console choosing "I want to use a certificate that is already installed on the server". It went through successfully and reported "The trusted certificate is imported successfully"... but still getting the same error in the BPA.
What do we have to do to renew this certificate. Can we continue the migration without renewing the certificate? Usually these 'red cross' errors mean no you can't.
0
Comment
Question by:laurencoull
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 29

Expert Comment

by:becraig
ID: 40443654
You can just renew the self signed certificate and then add that certificate to Trusted Root.

HEre is a how to on renewing the certificate:
http://www.kbtechnical.com/Blog/tabid/178/EntryId/5/Renew-SSL-self-signed-certificate-in-SBS-2008.aspx
0
 

Author Comment

by:laurencoull
ID: 40443857
Ok that sounded easy but it told me before running 'setup your Internet address' I had to firstly run the Connect to the Internet wizard, which failed with "Windows SBS did not properly configure your email". This seems to point to issues in MMC which I think will be troublesome to resolve. I'm not concerned about renewing the certificate if the migration process will allow me to complete it with these certificate error conditions in the BPA. But will it?
0
 
LVL 29

Accepted Solution

by:
becraig earned 500 total points
ID: 40460183
You should be able to complete even with an expired certificate, however you can create a self-signed certificate in IIS with the name: Companyweb

Then simply add it to the trusted store and re-run.

Here are the steps for creating a self signed cert in IIS
http://technet.microsoft.com/en-us/library/cc753127%28v=ws.10%29.aspx
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question