Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Certificate Expired error thrown up by SBS2008 BPA

Posted on 2014-11-14
3
300 Views
Last Modified: 2014-12-13
We have a SBS 2008 and would like to do a migration to 2012 Essentials. When we run the SBS Best Practices Analyser on the SBS 2008, we get the following critical error:
"The ssl certificate for https://Companyweb:987 expired on 10/19/2011".
Following advice on some forums I ran the "Add a trusted Certificate" routine in the Windows SBS Console choosing "I want to use a certificate that is already installed on the server". It went through successfully and reported "The trusted certificate is imported successfully"... but still getting the same error in the BPA.
What do we have to do to renew this certificate. Can we continue the migration without renewing the certificate? Usually these 'red cross' errors mean no you can't.
0
Comment
Question by:laurencoull
  • 2
3 Comments
 
LVL 29

Expert Comment

by:becraig
ID: 40443654
You can just renew the self signed certificate and then add that certificate to Trusted Root.

HEre is a how to on renewing the certificate:
http://www.kbtechnical.com/Blog/tabid/178/EntryId/5/Renew-SSL-self-signed-certificate-in-SBS-2008.aspx
0
 

Author Comment

by:laurencoull
ID: 40443857
Ok that sounded easy but it told me before running 'setup your Internet address' I had to firstly run the Connect to the Internet wizard, which failed with "Windows SBS did not properly configure your email". This seems to point to issues in MMC which I think will be troublesome to resolve. I'm not concerned about renewing the certificate if the migration process will allow me to complete it with these certificate error conditions in the BPA. But will it?
0
 
LVL 29

Accepted Solution

by:
becraig earned 500 total points
ID: 40460183
You should be able to complete even with an expired certificate, however you can create a self-signed certificate in IIS with the name: Companyweb

Then simply add it to the trusted store and re-run.

Here are the steps for creating a self signed cert in IIS
http://technet.microsoft.com/en-us/library/cc753127%28v=ws.10%29.aspx
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

791 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question