SSL Certificate on SBS 2011 / Exchange 2010

Morning All,

We have an SBS2011 Server and all of the workstations are getting the expired certificate warning when they first open up Outlook. The users can click Yes to the warning and then carry on as normal but we want to resolve it by renewing the SSL Cert.

Can anyone point me in the right direction of where to get a reliable cert from and a possible guide on how to install it on Exchange 2010?

We are in the UK if that makes a difference?

Thanks for your time,

J
phoenix81Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MAS (MVE)EE Solution GuideCommented:
If you are looking for cheap certificate please buy multiple domain from www.namecheap.com 
If you can afford you can buy www.digicert.com UC/SAN certificate

use this for CSR command generator
https://gallery.technet.microsoft.com/Exchange-20072010-and-2013-17a0b52f/view/Discussions#content

And install using thishttps://www.digicert.com/ssl-certificate-installation-microsoft-exchange-2010.htm

Please check my article if you face any error.
http://www.experts-exchange.com/articles/13676/Out-Of-office-not-working.html
0
David AtkinTechnical DirectorCommented:
Hello,

You can renew the existing self signed certificate by doing the following:

Open the SBS Console> Click on the Network Tab> Click on the Connectivity sub tab.

Run the Fix My Network wizard.  

It will identify the expired certificate.  Following the wizard will replace the certificate and will update IIS/Exchange and the remote web gateway.

If you want to purchase a trusted certificate then you can do so by following this article:
https://www.digicert.com/csr-creation-ssl-installation-small-business-server.htm

GoDaddy is an ok cert provider - Not the cheapest though.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DLeaverCommented:
Just to add as its an SBS server you will need to follow the wizard methods recommended by David above.  You can use the Exchange 2010 method and it will complete successfully but the issue may persist until the wizard is then run as well...
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

phoenix81Author Commented:
Thanks for the replies!

David, would doing your steps mean that we do not need to purchase a new certificate at all?

Thanks
0
David AtkinTechnical DirectorCommented:
Yes that's correct. The self signed certificate is generated by the server itself.

However having a Trusted Certificate in place is always better than a self signed as there are many benefits. Security for one, ease of access another etc.

Do you have a trusted cert in place now? Or a self signed?
0
phoenix81Author Commented:
This worked perfectly thank you
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.