Solved

SBS Small Business Server Self Signed Certificate Renewal Period

Posted on 2014-11-30
3
320 Views
Last Modified: 2014-12-05
Hi All,

I have noticed a change in behaviour for SBS Self Signed Certificates recently, specifically relating to the renewal period.

From memory, they used to renew for two years, however three recent renewals done on our client SBS servers have only renewed for slightly over two months. This has happened on both SBS 2008 and SBS 2011 servers, fully patched and updated to date.

Obviously having to remember to renew client server certificates every few months will become a hassle!

Has anyone else seen this and/or know why the renewal period has changed?

Thanks & Seasons Greetings To All from Melbourne, Australia!
0
Comment
Question by:lexrx
  • 2
3 Comments
 
LVL 56

Accepted Solution

by:
Cliff Galiher earned 500 total points
ID: 40473000
SBS sets up a CA at the time it is installed. Then the "self signed" certificate is issued as a leaf when the wizard is run. While the leaf is issued for two years, the root (created when the OS is first installed) is a bit longer so it doesn't have to be renewed as often and so that a new cert doesn't need to be installed on clients when the leaf is renewed.. Based on what you are describing, my suspicion is that the root is about to expire, which would make the window between leaf renewal and root expiration only a couple months. It isn't something you'll need to keep doing every few months though. Once renewed, the root won't expire again for a few years (much like the leaf) so you'll be back to normal.
0
 

Author Comment

by:lexrx
ID: 40484193
Hi Cliff, thanks for the explanation. Is there command or GUI available to show the expiration status of the root?

Thanks and regards, Brad.
0
 

Author Closing Comment

by:lexrx
ID: 40484194
Answered on point and totally resolves my query.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Small Business Server 2011. NOTE: This guide has been written using the preview version of SBS2011 therefore some of the screens may …
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now