Re: Creating an enterprise CA on SBS 2003

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi Hal,

You must have been playing with IIS settings if that is your default
directory. You can't just do that with SBS if you want everything to work.
Please undo your changes and rerun the CEICW. You should also download and
install the SBS BPA.

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum: http://www.smallbizserver.net/Default.aspx?tabid=53
"Hal" <Hal@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5E37C83D-7D8B-4335-BE3A-36E4599E4719@xxxxxxxxxxxxxxxx
No I dont since I have /exchange as my default home directory
"Marina Roos [SBS-MVP]" wrote:

Hi Hal,

From outside you need to use http://webmail.ourdomain.com/exchange or
/remote.

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum:
http://www.smallbizserver.net/Default.aspx?tabid=53
"Hal" <Hal@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:309E6FD6-594B-4479-9B8B-CF87880F7B9B@xxxxxxxxxxxxxxxx
I have created a certificate and applied it the default website
security.

Our public dns is webmail.ourdomain.com. The servers internal name is
server.ourdomain.local.
I created the certificate to with webmail.ourdomain.com and port 443 is
open
and pointing to my server. When I attempt to hit the server via
https://webmail.ourdomain.com it times out. If I turn off SSL it works
fine.

We need https so that the users can do outlook via https as apposed to
being
vpned into the network.

"Miles Li [MSFT]" wrote:


Hello,

Thank you for posting here.

According to your description, I understand that:

You want to deploy CA in the SBS 2003 domain for HTTPS.

If I have misunderstood the problem, please don't hesitate to let me
know.

Q: How do I create a certificate so that my users will be able to do
what
I
need ?

You can install the CA role on the SBS sever. Request a Computer
Certificate in the SBS CEICW and install the certificate for remote
web
access.

Chapter 6 - Managing Microsoft Certificate Services and SSL
http://technet.microsoft.com/en-us/library/bb727098.aspx

How to Install a Public 3rd Party SSL Certificate on IIS on SBS 2003
http://blogs.technet.com/sbs/archive/2007/08/21/how-to-install-a-public-3rd-
party-ssl-certificate-on-iis-on-sbs-2003.aspx

Q: How do I create a certificate so that my users will be able to do
what
I
need ?

Please understand that as your CA is not trusted by remote client by
default. You will have to export CA root certificate to cer file and
add
it
to the trusted root certificate store on all remote clients.

Creating, Obtaining, and Installing Trusted Certificates in a Windows
SBS
2003 Network Environment
http://technet.microsoft.com/en-us/library/cc949119(WS.10).aspx

Generally, we would recommend you to install a 3 rd party certificate
that
its root certificate is already trusted by Windows OS. Or you can also
count on the self signed certificate that is created by SBS wizard.
Could
you please explain the reason why you need a CA for https web site
publishing?

Hope it helps. If you have any questions or concerns, please do not
hesitate to let me know.





Best regards,

Miles Li
Microsoft Online Newsgroup Support

==================================================================
Please post your EBS related questions to the EBS newsgroup on Connect
website:
https://connect.microsoft.com/ebs08/community/discussion/richui/default.aspx


If you want to use a newsreader other than a web forum to access these
newsgroups,
please refer to the following blog to apply NNTP password and
configure a
newsreader:
http://msmvps.com/blogs/bradley/archive/2008/11/02/signing-up-for-the-sbs-20
08-newsgroups.aspx
==================================================================
When responding to posts, please "Reply to Group" via your newsreader
so
that others may learn and benefit from your issue.
==================================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.
==================================================================







.

Relevant Pages

  • RE: Possible Certificate Problem
    ... to fail to install the itms on the desktop in order for me to complete the ... > PPC to the Exchange server. ... > the SSL will be disabled, so you do not need to use certificate. ... > you installed ISA on the SBS 2K3, please do run CEICW again to re-allow OMA. ...
    (microsoft.public.windows.server.sbs)
  • Re: GoDaddy cert install on SBS2003 Premium i.e. ISA2004
    ... I understand that you want to install the ... 3rd-party certificate on SBS, the wizard configure everything for you. ... | that when you have ISA, the cert gets used by ISA and you leave the ...
    (microsoft.public.windows.server.sbs)
  • Re: Win Mobile 5 + SBS 2003 SP1 + Exchange SP1 Connection woes
    ... Join the worlds largest SBS User Group ... So the certificate copied over just fine and has been installed on both ... The directions for install state that I can use the cert from the ...
    (microsoft.public.windows.server.sbs)
  • Re: Certifcate reset error - Need for mobile device connect
    ... That is why I am thinking of revoking the current GoDaddy certificate and removing the certificate from default and requesting a new one. ... Have you installed the GoDaddy cert on the SBS box yet yet? ... What I am trying to accopmlish is to have my SBS exchange server synch wireless with a Motorola Q phone. ... Manager packet from the SBS 2003 server to recreate the VPN connection. ...
    (microsoft.public.windows.server.sbs)
  • Re: SSL for SharePoint errors
    ... everything is HTTPS and works fine. ... After you success run CEICW to create self-signed certificate for SBS, ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)