RE: SBS 2k3 CA - How can I issue a *.ourdomain.com certificate ?

Hi Pedro,

Thanks for posting here.

From the description, I understand the issue is that you get hung when
going through the Firewall configuration and you want to issue
*.ourdomain.com certificate. If I am off base, please don't hesitate to let
me know.

Before we go any further, may I know if you are using the Standard or
Premium Edition (with or without SP1 installed)? For the Premium Edition,
if we don't properly configure the ISA Server 2000 or 2004, the outbound
traffic will be denied by the ISA. If you are using the Standard Edition,
the CEICW Wizard will configure the RRAS component to be the basic firewall.

Let us refer to the following steps to troubleshoot the issue:

I.How many NIC are installed on the SBS 2003 server box? If this is a
server with single NIC and the ISA is installed in integrated mode
(firewall and caching), please uninstall the ISA and reinstall it in
caching mode only. Rerun CEICW to see if the problem will be resolved.

II.I have seen a similar issue being resolved by reinstalling the
Administration tools. Please try the following steps:

1. Click Start, point to Control Panel and click Add or Remove Programs.

2. Click Windows Small Business Server 2003 and click Change/Remove.

3. Go through the wizards until the Component Selection dialog box is
displayed.

4. Select Reinstall for Server Tools, and follow the wizard to finish
reinstallation.

5. Then run again CEICW.

III.Please take your time to rerun CEICW wizard. This wizard helps to
configure network and publish website correctly.

To do this:

1. Click Start, click Server Management. Click To Do List and then click
"Connect to the Internet".? Click Next, and go through the Internet option.

2. Select Enable firewall and click Next.

3. On the Web Services Configuration page shows, select item according to
your enviroment. Click Next.

4. On the Web Server Certificate page shows. Select "Create a new Web
server certificate", and type your FQDN (mail.ourdomain.com) in the "Web
server name" text box. Click Next.

NOTE: If you choose to create a new Web server certificate (private
certificate), you should type the public FQDN that you will use to access
the sites (for example, if your public FQDN that you use to access the
sites is mail.ourdomain.com, you should type mail.ourdomain.com as the new
certificate name).

5. Go through the steps to finish the wizard.

Note:you cannot issue *.ourdomain.com certificate,Please issue the actual
domain name as certificate name,such as webmail.ourdomain.com

For more information, please refer to:

825763 How to configure Internet access in Windows Small Business Server
2003

http://support.microsoft.com/?id=825763


If the issue persists, please help me collect the following information for
analysis:

1. Make a screen capture of the error message in the CEICW:

A. Press Alt + Pr Scrn to capture a screen shot.

B. From Start, go to Run, enter pbrush in the Open box, and then click OK.

C. Use Ctrl + V to paste the screen shot to the canvas.

D. From the File menu, go to Save and save as a JPG file and send it to me
at v-jaluo@xxxxxxxxxxxxx


2.%sbsprogramdir%\Support\icwlog.txt.

3.%sbsprogramdir%\networking\icw\icwdetails.htm

%sbsprogramdir%\networking\icw\icwdetails*.htm


Note: each time the Configure E-mail and Internet Connection Wizard is run,

a new .htm file is automatically generated to preserve the previous
settings.

For example, Icwdetails1.htm, Icwdetails2.htm, and so on.


Please zip all files and send to me at v-jaluo@xxxxxxxxxxxxx


I appreciate your time. I am happy to be of assistance and look forward to
your reply.


Have a nice day!

Best regards,

Jacky Luo (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

====================================================

PLEASE NOTE: The partner managed newsgroups are provided to

assist with break/fix issues and simple how to questions.

We also love to hear your product feedback! Let us know what you think by

posting

from the web interface: Partner Feedback

from your newsreader: microsoft.private.directaccess.partnerfeedback.

We look forward to hearing from you!

====================================================

When responding to posts, please "Reply to Group" via your newsreader

so that others may learn and benefit from this issue.

====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

====================================================

.

Relevant Pages

  • RE: Errors running Manage Internet and E-Mail
    ... to run Configure Firewall wizard and Configure Remote Access wizard under ... Select Windows Small Business Server 2003 and then click Change/Remove. ... You may prompt to inset SBS ...
    (microsoft.public.windows.server.sbs)
  • RE: CEICW fails at Fails at email configuration
    ... the CEICW Wizard will configure the RRAS component to be the basic firewall. ... 1.How many NIC are installed on the SBS 2003 server box? ... Select Reinstall for Server Tools, and follow the wizard to finish ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2k3 CA - How can I issue a *.ourdomain.com certificate ?
    ... i got a messagen saying that i can't issue a wildcard certificate. ... I.How many NIC are installed on the SBS 2003 server box? ... Rerun CEICW to see if the problem will be resolved. ... Select Reinstall for Server Tools, and follow the wizard to finish ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 remote access
    ... CEICW is the Configure Email and Internet Connection Wizard and it is on the ... > So far by putting in my broadband IP address from my> browser with 8080 on the end it gets me into the firewall> router admin page, I just need to get into the SBS server> now. ...
    (microsoft.public.backoffice.smallbiz2000)
  • RE: SSL for Exchange stops WSUS
    ... Do you use a commercial certificate that was bought from third party ... When we run the CEICW wizard and choose create a new web server certificate ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
Loading