Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

SBS Small Business Server Self Signed Certificate Renewal Period

Posted on 2014-11-30
3
Medium Priority
?
387 Views
Last Modified: 2014-12-05
Hi All,

I have noticed a change in behaviour for SBS Self Signed Certificates recently, specifically relating to the renewal period.

From memory, they used to renew for two years, however three recent renewals done on our client SBS servers have only renewed for slightly over two months. This has happened on both SBS 2008 and SBS 2011 servers, fully patched and updated to date.

Obviously having to remember to renew client server certificates every few months will become a hassle!

Has anyone else seen this and/or know why the renewal period has changed?

Thanks & Seasons Greetings To All from Melbourne, Australia!
0
Comment
Question by:lexrx
  • 2
3 Comments
 
LVL 59

Accepted Solution

by:
Cliff Galiher earned 2000 total points
ID: 40473000
SBS sets up a CA at the time it is installed. Then the "self signed" certificate is issued as a leaf when the wizard is run. While the leaf is issued for two years, the root (created when the OS is first installed) is a bit longer so it doesn't have to be renewed as often and so that a new cert doesn't need to be installed on clients when the leaf is renewed.. Based on what you are describing, my suspicion is that the root is about to expire, which would make the window between leaf renewal and root expiration only a couple months. It isn't something you'll need to keep doing every few months though. Once renewed, the root won't expire again for a few years (much like the leaf) so you'll be back to normal.
0
 

Author Comment

by:lexrx
ID: 40484193
Hi Cliff, thanks for the explanation. Is there command or GUI available to show the expiration status of the root?

Thanks and regards, Brad.
0
 

Author Closing Comment

by:lexrx
ID: 40484194
Answered on point and totally resolves my query.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
This Micro Tutorial will teach you how to add a cinematic look to any film or video out there. There are very few simple steps that you will follow to do so. This will be demonstrated using Adobe Premiere Pro CS6.
Despite its rising prevalence in the business world, "the cloud" is still misunderstood. Some companies still believe common misconceptions about lack of security in cloud solutions and many misuses of cloud storage options still occur every day. …

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question