SSL Certificate on SBS 2011 / Exchange 2010

Morning All,

We have an SBS2011 Server and all of the workstations are getting the expired certificate warning when they first open up Outlook. The users can click Yes to the warning and then carry on as normal but we want to resolve it by renewing the SSL Cert.

Can anyone point me in the right direction of where to get a reliable cert from and a possible guide on how to install it on Exchange 2010?

We are in the UK if that makes a difference?

Thanks for your time,

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MASEE Solution Guide - Technical Dept HeadCommented:
If you are looking for cheap certificate please buy multiple domain from 
If you can afford you can buy UC/SAN certificate

use this for CSR command generator

And install using this

Please check my article if you face any error.
David AtkinTechnical DirectorCommented:

You can renew the existing self signed certificate by doing the following:

Open the SBS Console> Click on the Network Tab> Click on the Connectivity sub tab.

Run the Fix My Network wizard.  

It will identify the expired certificate.  Following the wizard will replace the certificate and will update IIS/Exchange and the remote web gateway.

If you want to purchase a trusted certificate then you can do so by following this article:

GoDaddy is an ok cert provider - Not the cheapest though.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Just to add as its an SBS server you will need to follow the wizard methods recommended by David above.  You can use the Exchange 2010 method and it will complete successfully but the issue may persist until the wizard is then run as well...
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

phoenix81Author Commented:
Thanks for the replies!

David, would doing your steps mean that we do not need to purchase a new certificate at all?

David AtkinTechnical DirectorCommented:
Yes that's correct. The self signed certificate is generated by the server itself.

However having a Trusted Certificate in place is always better than a self signed as there are many benefits. Security for one, ease of access another etc.

Do you have a trusted cert in place now? Or a self signed?
phoenix81Author Commented:
This worked perfectly thank you
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.