Re: Upgrade SBS2000 to 2003 ICW failure - certificates?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Marina Roos [SBS-MVP] (marina_at_roos.nodontwantspam.nl.com)
Date: 06/28/04 

Date: Mon, 28 Jun 2004 22:30:15 +0200

Hi Simon,

Rerun CEICW and put in your public IP (the one on your broadband) as the
certificate. 

-- 
Regards,
Marina
Microsoft SBS-MVP
"Simon Alliott" <administrator@elmmax.co.uk> schreef in bericht
news:ux1VV5RXEHA.2908@TK2MSFTNGP10.phx.gbl...
> I've more or less figured out what an MX record is and my query now is
> whethr this is registered on my server or with my isp.
> I am beginning to think it is with the ISP. Would they register my
computer
> name i.e. servera.elmmax.co.uk.
>
> My ISP is force9 and I notice that a traceroute to my static IP
> (80.229.39.8) comes as elmmax.force9.co.uk so I think that mail to
> elmmax.co.uk goes to a mailbox which is elmmax.force9.co.uk. As you can
see
> on this point I am floundering.
>
> Simon
>
>
> "Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in
message
> news:uOSrNWRXEHA.2816@TK2MSFTNGP11.phx.gbl...
> > Hi Simon,
> >
> > Is there an MX record for the name you used in the certificate? If not,
> > create the certificate while running CEICW and give it the public static
> IP.
> >
> > -- 
> > Regards,
> >
> > Marina
> > Microsoft SBS-MVP
> >
> > "Simon Alliott" <administrator@elmmax.co.uk> schreef in bericht
> > news:er6RXKOXEHA.1888@TK2MSFTNGP11.phx.gbl...
> > > Here is ipconfig/all. Thanks for the help.
> > > I must mention that somewhere in setup I used something with
> elmhirst.biz
> > > instead of elmmax.co.uk
> > > Historically we have been elmmax.co.uk but have been using
elmhirst.biz
> > for
> > > email for a while. I think it was in ICW when it asked for a
certificate
> > and
> > > I set certificate to servera.elmhirst.biz. This may be a red herring
for
> > > you.
> > > Under policies in exchange, and this was the case under SBS2K, the
main
> > > email is elmmax.co.uk and there is a second entry for elmhirst.biz to
> > ensure
> > > mail is directed to the correct user nomatter which email address is
> used.
> > I
> > > still think this is a red herring
> > > I have been loking at help on webserver certificates and I note that
> there
> > > is no folder Clientapps\SBScert which suggests to me that no
certificate
> > has
> > > been created.
> > >
> > > I'm well stuck on this one.
> > > Simon
> > >
> > >
> > > Windows IP Configuration
> > >
> > >    Host Name . . . . . . . . . . . . : SERVERA
> > >    Primary Dns Suffix  . . . . . . . : elmmaxdomain.elmmax.co.uk
> > >    Node Type . . . . . . . . . . . . : Unknown
> > >    IP Routing Enabled. . . . . . . . : Yes
> > >    WINS Proxy Enabled. . . . . . . . : Yes
> > >    DNS Suffix Search List. . . . . . : elmmaxdomain.elmmax.co.uk
> > >                                        elmmax.co.uk
> > >                                        co.uk
> > >
> > > Ethernet adapter Server Local Area Connection:
> > >
> > >    Connection-specific DNS Suffix  . :
> > >    Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast
> > > Ethernet
> > > NIC
> > >    Physical Address. . . . . . . . . : 00-20-ED-2D-0C-6C
> > >    DHCP Enabled. . . . . . . . . . . : No
> > >    IP Address. . . . . . . . . . . . : 10.0.0.2
> > >    Subnet Mask . . . . . . . . . . . : 255.255.255.0
> > >    Default Gateway . . . . . . . . . : 10.0.0.61
> > >    DNS Servers . . . . . . . . . . . : 10.0.0.2
> > >    Primary WINS Server . . . . . . . : 10.0.0.2
> > >
> > > "Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in
> > message
> > > news:eLyNXvDXEHA.3972@TK2MSFTNGP12.phx.gbl...
> > > > Can you  post the ipconfig/all from the server? SBS runs much nicer
> with
> > 2
> > > > nics by the way. Have a look at www.smallbizserver.net for some
> > diagrams.
> > > >
> > > > -- 
> > > > Regards,
> > > >
> > > > Marina
> > > > Microsoft SBS-MVP
> > > >
> > > > "Simon Alliott" <administrator@elmmax.co.uk> schreef in bericht
> > > > news:O$nWTYCXEHA.2844@TK2MSFTNGP11.phx.gbl...
> > > > > Phew this one has got me. Everything has upgraded fine until the
> ICW,
> > > > which
> > > > > fails
> > > > > We have a single network card connected to a firewall router.
server
> > is
> > > > > 10.0.0.2. Router is 10.0.0.61.
> > > > >
> > > > > I had to start exchange manually and it is running but email, both
> > > > external
> > > > > (expected)and internal are dead. Internet browsing is ok and
client
> > > > > computeres can browse the internet using the server as proxy.
> > > > >
> > > > >
> > > > >
> > > > > The log printout is here and I think it is something to do with
> > > > certificates
> > > > > 27/06/2004 09:53
> > > > > C:\Program Files\Microsoft Windows Small Business
> > > > > Server\Networking\ICW\wizcert.dll, version 5.2.2651.0
> > > > > Calling CCertCommit::ValidatePropertyBag
> > > > > Require SSL for OWA: 1
> > > > > Require SSL for Remote Portal: 1
> > > > > Require SSL for Monitoring: 0
> > > > > Require SSL for OMA: 0
> > > > > Require SSL for CompanyWeb: 0
> > > > > Require 128 Bit Encryption: 1
> > > > > Cert selection: -1
> > > > > CCertCommit::ValidatePropertyBag returned OK
> > > > > calling CNetCommit::Commit (2531456).
> > > > > calling CNetCommit::ValidatePropertyBag ().
> > > > > Call to Querying for the property bag () returned ok.
> > > > > Property bag is not dirty, skipping validation
> > > > > calling CNetCommit::Common ().
> > > > > calling CNetCommit::GetLanNicInfo ().
> > > > > LAN NIC Guid: {46993142-87E7-41EF-80CA-6C95F808AC2A}
> > > > > Call to Converting LAN NIC Guid () returned ok.
> > > > > Call to Getting IP address for the LAN NIC () returned ok.
> > > > > Call to Reading in the LAN NIC info () returned ok.
> > > > > Call to Fixing the TCP/IP NIC Binding order () returned ok.
> > > > > Dhcp server is installed and not disabled
> > > > > Call to Set DHCP Server to start up automatically () returned ok.
> > > > > DNS server is installed and not disabled
> > > > > Call to Changing startup type for DNS () returned ok.
> > > > > Call to Clearing DNS server entries on the LAN NIC () returned ok.
> > > > > Call to Setting DNS server IP for the LAN NIC () returned ok.
> > > > > Call to Resetting DNS recursion timeout () returned ok.
> > > > > Error 0x80070003 returned from call to Resetting client dns query
> > > timouts
> > > > in
> > > > > config.dat().
> > > > > Error 0x80070003 returned from call to CNetCommit::Common().
> > > > > Error 0x80070003 returned from call to CNetCommit::Commit().
> > > > > calling CCometCommit::CommitEx ().
> > > > > calling CCometCommit::ValidatePropertyBag ().
> > > > > Call to Initializing CometUtil () returned ok.
> > > > > Call to Reading the firewall selection () returned ok.
> > > > > Firewall selection: 1
> > > > > Call to Validating Internet Users Group () returned ok.
> > > > > Call to Reading web publishing selection () returned ok.
> > > > > Call to Reading OWA publishing selection () returned ok.
> > > > > Call to Reading RUP publishing selection () returned ok.
> > > > > Call to Reading Monitoring publishing selection () returned ok.
> > > > > Call to Reading OMA publishing selection () returned ok.
> > > > > Call to Reading RPC publishing selection () returned ok.
> > > > > Call to Reading ROOT publishing selection () returned ok.
> > > > > Web publishing selections:
> > > > > OWA publishing: 1
> > > > > RUP publishing: 1
> > > > > Monitoring publishing: 0
> > > > > OMA publishing: 0
> > > > > RPC publishing: 0
> > > > > ROOT publishing: 0
> > > > > Call to Validating Web publishing () returned ok.
> > > > > Call to CCometCommit::ValidatePropertyBag () returned ok.
> > > > > Call to Validating property bag () returned ok.
> > > > > Call to Reading private NIC Guid () returned ok.
> > > > > Call to Reading private NIC IP () returned ok.
> > > > > Private NIC IP: 10.0.0.2
> > > > > Call to GetComputerName () returned ok.
> > > > > Computer name: SERVERA
> > > > > Error 0x80070002 returned from call to CCometCommit::Commit().
> > > > > Calling CCertCommit::CommitEx
> > > > > Calling CCertCommit::ValidatePropertyBag
> > > > > Require SSL for OWA: 1
> > > > > Require SSL for Remote Portal: 1
> > > > > Require SSL for Monitoring: 0
> > > > > Require SSL for OMA: 0
> > > > > Require SSL for CompanyWeb: 0
> > > > > Require 128 Bit Encryption: 1
> > > > > Cert selection: -1
> > > > > CCertCommit::ValidatePropertyBag returned OK
> > > > > CCertCommit::EnableSSL returned OK
> > > > > CCertCommit::RequireSSL returned OK
> > > > > CCertCommit::NotifyRemoteUserPortal returned OK
> > > > > *** Reading the Internet Server Name returned ERROR 80070002
> > > > > *** CCertCommit::CommitEx returned ERROR 80070002
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • RE: Hi, Any work around for windows mobile 6 dynamic loading warni
    ... Simon, afterfollowing the command suggested below i could only imported the ... still i dont see the certificate after clicking on 'select from store' using ... Visual Developer - Device Application Development MVP ... How to get the reuired certificate under 'select from store option'. ...
    (microsoft.public.dotnet.framework.compactframework)
  • Re: How to create SSL certificate for server.domainname.com?
    ... but I had not heard of the issue with GoDaddy certs and ... simon wrote: ... SBS 2003 the self-created certificate will no longer work, ... the exact domainname of the server itself: ...
    (microsoft.public.windows.server.sbs)
  • Re: Upgrade SBS2000 to 2003 ICW failure - certificates?
    ... I'm only a bit techy. ... I have been trying to create a record in ICW, which is the first box on the ... > Hi Simon, ... > Is there an MX record for the name you used in the certificate? ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: RADIUS server setup
    ... Simon ... > domain usernames" that you were successful specifying EAP-MSCHAPv2 ... > I see Andrew provided a suggestion for the certificate issue. ... >> I have RADIUS working authenticating against domain usernames. ...
    (microsoft.public.windows.server.sbs)
  • Re: OWA
    ... Do you have a mx-record for your fqdn? ... schreef in bericht ... >>about the certificate, did you fill in your fqdn or IP? ... >>Microsoft SBS-MVP ...
    (microsoft.public.windows.server.sbs)