certificate issues sbs 2008
can someone help, i am running sbs 2008 with exchange 2007, i got an error from the daily network report that 'The certificate that is helping to secure your Web site traffic will expire in less than two weeks. Before then, run the Fix My Network Wizard from the Connectivity subtab on the Network page of the Windows SBS Console. I dont want to run the wizard as my router's firewall is preventing the access to the server. when i attempted renewing via exchange management shell, i got a warning which tells me to overwrite the default smtp certificate (which will expire in the future, 2013) i want to know 1)what is the implication of overwriting an existing certificate which is yet to expire with a new one (note they are self signed) 2)Should I remove expired certificates from the server?
September 1st, 2012 5:30am

1) The implication is that you want to replace the certificate. That's probably what you want to do if you're replacing an expiring certificate with a new one. Make sure that the certificate you're replacing is configured the same except for expiry date as the new one. 2) I would, but only after you're sure the new certificate works.Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Free Windows Admin Tool Kit Click here and download it now
September 2nd, 2012 3:16am

1) The implication is that you want to replace the certificate. That's probably what you want to do if you're replacing an expiring certificate with a new one. Make sure that the certificate you're replacing is configured the same except for expiry date as the new one. 2) I would, but only after you're sure the new certificate works.Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
September 2nd, 2012 3:30am

Hi Eaglelinkcon, Since you use self-signed certificate and the certificate does not expire, "It is a best practice to renew the self-signed certificates before they expire. You can use the Exchange Management Shell to renew the self-signed certificate by cloning the certificate. You can clone the certificate by first using the Get-ExchangeCertificate cmdlet to obtain the thumbprint of the current default certificate for your domain." For example: Get-ExchangeCertificate -Thumbprint c4248cd7065c87cb942d60f7293feb7d533a4afc | New-ExchangeCertificate For more information, please see: Understanding the Self-Signed Certificate in Exchange 2007 http://technet.microsoft.com/en-us/library/bb851554(v=exchg.80).aspx By the way, as you are running SBS, I would also suggest you seek the solution in the SBS forum, http://social.technet.microsoft.com/Forums/en-US/smallbusinessserver/threads Frank Wang TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
September 3rd, 2012 3:10am

Hi Eaglelinkcon, Any updates?Frank Wang TechNet Community Support
September 4th, 2012 10:10pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics