Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

SBS Small Business Server Self Signed Certificate Renewal Period

Posted on 2014-11-30
3
345 Views
Last Modified: 2014-12-05
Hi All,

I have noticed a change in behaviour for SBS Self Signed Certificates recently, specifically relating to the renewal period.

From memory, they used to renew for two years, however three recent renewals done on our client SBS servers have only renewed for slightly over two months. This has happened on both SBS 2008 and SBS 2011 servers, fully patched and updated to date.

Obviously having to remember to renew client server certificates every few months will become a hassle!

Has anyone else seen this and/or know why the renewal period has changed?

Thanks & Seasons Greetings To All from Melbourne, Australia!
0
Comment
Question by:lexrx
  • 2
3 Comments
 
LVL 57

Accepted Solution

by:
Cliff Galiher earned 500 total points
ID: 40473000
SBS sets up a CA at the time it is installed. Then the "self signed" certificate is issued as a leaf when the wizard is run. While the leaf is issued for two years, the root (created when the OS is first installed) is a bit longer so it doesn't have to be renewed as often and so that a new cert doesn't need to be installed on clients when the leaf is renewed.. Based on what you are describing, my suspicion is that the root is about to expire, which would make the window between leaf renewal and root expiration only a couple months. It isn't something you'll need to keep doing every few months though. Once renewed, the root won't expire again for a few years (much like the leaf) so you'll be back to normal.
0
 

Author Comment

by:lexrx
ID: 40484193
Hi Cliff, thanks for the explanation. Is there command or GUI available to show the expiration status of the root?

Thanks and regards, Brad.
0
 

Author Closing Comment

by:lexrx
ID: 40484194
Answered on point and totally resolves my query.
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This guide is intended for migrating Windows 2003 Standard with Exchange 2003 to Windows Small Business Server 2008. You will need the following: Exchange Best Practice Analyzer: http://www.microsoft.com/downloads/details.aspx?FamilyID=DBAB201F-…
I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

789 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question