Security Certificate has expired

Hello All... Customer is getting the above message every time they open outlook... I checked their server which is SBS and noticed the certificate is expired... However it is not self assigned so I am not sure what to do... I cant seem to just renew it? It has never been setup with an SSL certificate from the outside and has been working fine for the last 3 years.... Should I purchase an outside SSL? Is there any quick instructions on what I should do? Remember everything resides on 1 server as it is small business server. Any help would be great as I believe they are currently receiving email but getting complaints of customers not receiving their replies!
gsswho6Asked:
Who is Participating?
 
Guy LidbetterCommented:
If you have never had an external cert there is no need to go purchasing one now...

If its the server cert thats the issue do the following

Start the Windows SBS2011 Standard Console
Click on the Network icon in the top bar
Wait for the panel in the right to become active and then click on 'Fix My Network'
Let the wizard search for problems.
One of the problems it should find is the expired certificate.
Clear all the checkboxes except the certificate one and click Next
This will then re-issue a new self signed certificate on the server.

Regards

Guy
0
 
David AtkinTechnical DirectorCommented:
Hello,

You need to purchase another third party certificate.  It is slightly different that renewing a self signed certificate but most providers have steps for you to follow.

See here for GoDaddys instructions for example:
http://sbs.seandaniel.com/2009/02/installing-godaddy-standard-ssl.html

Basically you open the Windows SBS Console on the server, navigate to the Network tab and the Connectivity sub-tab and launch the Add a Trusted Certificate connectivity task.  Follow the instructions from there.
0
 
Guy LidbetterCommented:
Hi there, if its the exchange cert you can get a new one with the below code in the exchange shell...


Get-ExchangeCertificate <thumbprint> | New-ExchangeCertificate | Enable-ExchangeCertificate -services pop,imap,smtp,iis

Open in new window



You can get the thumbprint of the old cert with Get-ExchangeCertificate
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
gsswho6Author Commented:
Thanks... Question... When installing this cert will it mess anything else up that is running on the SBS? I have heard horror stories about people SAGE stop working/etc...  Appreciate it.
0
 
gsswho6Author Commented:
Let me give that shot GUY.
0
 
David AtkinTechnical DirectorCommented:
The Certificate will be applied to Exchange, IIS and Remote Gateway Server.

It won't cause any problems with Sage etc.

Do it via the SBS Console.  NOT Command line - The SBS Console will apply the certificates to all parts but the Exchange Command will not.
0
 
gsswho6Author Commented:
I believe all the other certs SBS shows are self assigned TRUE and have expired dates like in 2020... Then the one expired show self assign FALSE and shows SMTP, IIS, POP, IMAP ....
0
 
Guy LidbetterCommented:
@David - what are all the parts you are referring to?
0
 
David AtkinTechnical DirectorCommented:
@Guy - Exchange, IIS and the Remote Desktop Gateway.

The correct way with SBS is via the console.  It can be done via command but the wizard is their for the Admins ease.
0
 
Guy LidbetterCommented:
Well, as mentioned, if its just the exchange cert, as I suspect since Outlook is complaining... I've done it numerous times via the command with no issues.

However I have had issues with IE settings on desktops resetting when doing it via the admin console.
0
 
gsswho6Author Commented:
Thanks GUY! That seemed to do this trick!
0
 
Guy LidbetterCommented:
Pleasure!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.