Exchange SSL cert renewal on SBS 2011

My SBS 2011 certificate was coming up for renewal. I followed the usual steps by requesting a new one (GoDaddy) using the SBS console. When I recieved the new certificaye, I installed it and everything looked good. However, I get the following message in my daily report. I have a new certificate and it is installed via the console.How do I apply this certificate to the exchange portion?
MSExchange Web Services 25 7/26/2015 6:47:59 PM 1 Event Details: The Exchange certificate [Subject] CN=remote.company.com, OU=Domain Control Validated [Issuer] CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US [Serial Number] 27C233A90E9354 [Not Before] 7/28/2014 10:18:27 AM [Not After] 7/28/2015 10:18:27 AM [Thumbprint]...
This topic first appeared in the Spiceworks Community

Hi,
SBS 2011 Essentials is designed to host you e-mail outside your network on a hosted solution like Office 365. So if you want exchange functionality you need to configure your server to use office 365 or any other hosted exchange solution.
Here is some information: http://blogs.technet.com/b/sbs/archive/2011/06/30/sbs-2011-essentials-and-office-365-great-value-for-our-customers.aspx
So no exchange installed locally this would also not be supported, because if you want that you need to go for SBS 2011 standard, which includes a locally installed exchange server.
Ref: http://social.technet.microsoft.com/Forums/en-US/e6957002-70c2-4f62-8bcd-cf3f5ccbb600/exchange-2010-on-sbs-2011-essentials?forum=smallbusinessserver

Similar Messages

Expiring Exchange certs on a SBS 2011 Standard server

We have many servers running SBS 2011 standard. On one particular server (which just passed the three year mark this past weekend) we are seeing MSExchangeTransport Event ID 12015 and 12016, telling us that an internal transport certificate has expired.
Based upon research, using the Get-ExchangeCertificate command, I have found that there are five different thumbprints indicating certificates. We currently have a commercial 5 year cert for the web user interface and AD synchronization.
Looking at the results of Get-ExchangeCertificate | fl, I can see that the first certificate (server.domain.local) goes from 4/10/2014 to 4/10/2015, the second (remote.domainname.com) goes from 8/16/2011 to 8/16/2016 (this is the commercial cert), the third
goes from 8/15/2011 to 8/12/2021, the fourth (this is the thumbprint referenced in the 12015 error) goes from 8/15/2011 to 8/14/2013 and the fifth goes from 8/15/2011 to 8/14/2013.
Reviewing the event log shows that the fifth certificate (also expired) is never referenced.
Several accepted answers on technet and other sites show that running Fix My Network will correct the problem, but running FMN on this server just shows me that my DHCP server is not running (which it is) and it wants me to create a static IPv6 address (which
it did not accomplish.)
What is the best way to fix a problem where important self-signed certificates expire after only two years?
Randy
MCP SBSC

Hi Randy,
I suggest run following command to get Self-signed certificate on your Exchange 2010 server:
Get-ExchangeCertificate | FL
Please collect the certificate which "IsSelfSigned" parameter value is True.
If it is not expired, please binding the existing certificate with IIS and SMTP service. Detailed command as below:
Get-ExchangeCertificate -Thumbprint
XXXXX876C45D19BA885E9FA96C48DD0C7DCXXXXX | Enable-ExchangeCertificate
-Services "IIS,SMTP"
If it is expired, I suggest re-create a new one. Detailed command as below:
Get-ExchangeCertificate -Thumbprint
XXXXX876C45D19BA885E9FA96C48DD0C7DCXXXXX | New-ExchangeCertificate
-Services "IIS,SMTP,IMAP,POP"
Please note, the Thumbprint in the example above in the result of running Get-ExchangeCertificate | FL
command.
Since SBS is different from Exchange server, I also suggest ask SBS Forum to double confirm this issue so that you can get more professional suggestions. For your convenience:
http://social.technet.microsoft.com/Forums/en-US/home?forum=smallbusinessserver
Please correct me if there is any misunderstanding.
Thanks
Mavis
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Mavis Huang
TechNet Community Support

SSL Cert Renewal w/Org Name Change

Hello,
We get our SSL certs from a central agency that deals with Verisign. The central agency changed their name, which changes the Organization Name on the cert. That prevents the cert from being imported by the server. On the advice of a Windows admin, I tried to fake it by creating a new site on that server, importing the new cert (all good), but then the new server won't start.
Is there a better way to get the new-org-named cert accepted by the original site?
Steve Kayner

Are you talking about changing your SMTP domain name? Or you want to change AD DS domain name? If you want to change/add SMTP domain that you Exchange is using, just add accepted domain that you wish to use.
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Damir

NAC appliance: SSL certs renewal

Hello!
I have the following question:
SSL certificates are going to expire soon on my NAC Mgr, Srv and NGS. So after I'll generate new CSRs will the existing certficates still be valid and used?
All systems are in production, and I don't have any testing enviroment to check, may be someone has done it already.

If you use the same CSR that you generated for the original cert, then you just import the new cert and it will be replaced. I didn't try to generate a new cert as I wasn't sure if it would overwrite the old private key.

IPhone users lost contact with sbs 2011 Exchange mail after upgrade to iOS 8

When all our users upgraded from iOS 7 to iOS 8 on their iPhones, they couldn't sync with our SBS 2011 Standard Exchange server anymore. Worked fine before upgrade.
SBS 2011 has done all its Windows Updates.
vpn-connection connects and works fine, but Exchange 2010 won't answer.

Hi Delbekk,
Would you please let me confirm whether it was Exchange Server SP3 on the SBS 2011? Did you install necessary
Update Rollups for the Exchange Server?
In addition, please open Event Viewer and check if relevant events were logged in Application log on the Exchange
Server 2010.
Please also check if error message was logged in the Exchange ActiveSync log.
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu

Inplace Upgrade of Exchange 2010 on SBS 2011 to Exhange 2013

Is it possible to upgrade exchange 2010 that is on SBS 2011 to Exchange 2013?
George Zugg

No 'In Place' Upgrade.
You can move exchange to a new server running 2013.
Robert Pearman SBS MVP
itauthority.co.uk |
Title(Required)
Facebook |
Twitter |
Linked in |
Google+

2012R2 RDS SSL Cert mismatch Issue on alternate port

Hi,I am trying to setup RDS on 2012R2.I only have a single public IP and i already have 443 SSL sent to the Exchange server using a GoDaddy cert for that.Ive got another GoDaddy cert for RDS thats running on a stand alone server.I have changed the RD Gateway to use port 444 for https.Ive added a firewall rule to send 444 to my TS.I can hit https://url:444/rdweb fine - no certificate error, it picks up the correct cert.I can login fine.I try to run a remote app, provide domain creds and then it errors with:Your computer can’t connect to the remote computer because the Remote Desktop Gateway servers address requested and the certificate subject name do not match. Contact your network administrator for assistanceSo it appears at the point of launching the app that its reverting back to 443 and picking up my exchange SSL cert instead....
This topic first appeared in the Spiceworks Community

Hi,I am trying to setup RDS on 2012R2.I only have a single public IP and i already have 443 SSL sent to the Exchange server using a GoDaddy cert for that.Ive got another GoDaddy cert for RDS thats running on a stand alone server.I have changed the RD Gateway to use port 444 for https.Ive added a firewall rule to send 444 to my TS.I can hit https://url:444/rdweb fine - no certificate error, it picks up the correct cert.I can login fine.I try to run a remote app, provide domain creds and then it errors with:Your computer can’t connect to the remote computer because the Remote Desktop Gateway servers address requested and the certificate subject name do not match. Contact your network administrator for assistanceSo it appears at the point of launching the app that its reverting back to 443 and picking up my exchange SSL cert instead....
This topic first appeared in the Spiceworks Community

Exchange 2007 - Outlook Anywhere problems after installing new SSL cert

*** Original thread posted on wrong forum ***
Hi all,
Exchange 2007 environment (2x CAS, ISA2006). Not much familiar with Exchange.
Problem: 20-odd machines off the domain use Outlook Anywhere (XP with Outlook 2010). AUthentication pop-up and not able to connect.
Company has recently changed its name and we have to renewed the SSL cert. Previous SSL cert. was issued to: webmail.oldcompname.co.uk (several SANs on that cert., including internal server names).
Applied for a new UCC SSL cert issued to: newcompanyname.com (also includes webmail.newcompanyname.com ; autodiscover.newcompanyname.com + old SANs).
The setting on those machines point the proxy to the following:
Https://webmail.oldcompname.co.uk (which is fine since it is in the cert and can be accessed)
Only connect to proxy servers that have this principal name in their cert.:
msstd:webmail.oldcompname.co.uk (I believe this is the problem since the new UCC SSL cert. was issued to newcompanyname.com).
Browsing technet + internet it seems that I need to look into OutlookProvider EXPR.
When I run Get-OutlookProvider everything is blank (I believe I should be concerned to EXPR only for Outlook Anywhere).
I am thinking of running: Set-OutlookProvider -Identity EXPR -CertPrincipalName msstd:newcomanyname.com
My only concern is whether this might break something else in the Exchange environment, especially as we have 100+ users on smartphones connecting via SSL on webmail.oldcompname.co.uk
Is it save to run this command? Do I need to re-start IIS? Do I need to look into any settings on ISA2006?
Comments/help are much appreciated.
Regards

Hi,
According to the description, I found that we re-new a SSL certificate.
"I am thinking of running: Set-OutlookProvider -Identity EXPR -CertPrincipalName msstd:newcomanyname.com"
Just do it. Then remove the old certificate on ISA server and install a new one.
Found a similar thread for your reference:
Renewal of SSL certificate in exchange 2007 with ISA 2006
http://social.technet.microsoft.com/Forums/exchange/en-US/25770038-8491-470a-92fa-8ae50674b7a6/renewal-of-ssl-certificate-in-exchange-2007-with-isa-2006
Hope it is helpful
Thanks
Mavis
Mavis Huang
TechNet Community Support

SBS 2011; Exchange ActiveSync problems in the middle of a migration

Hi
We're in the middle of a migration from SBS 2003 to SBS 2011 and are stuck in the lengthy process of moving users' mailboxes.
At this point, I have about 20 percent of the users' email on the SBS 2011 box, and the rest still on the SBS 2003 box.
Right now I have to quickly deal with an issue that's cropped up with Exchange ActiveSync:
I ran the Connectivity Analyzer for a user (this one's box had been migrated) and got the error below. By the looks of the error, I don't think it matters where the mailbox happens to reside ...
The SBS 2011 box has been set up using a migration install and the procedures listed in the MS migration docs.
At the rate we're going, it's still going to take a while to migrate these mailboxes. (The fact that they began tonight was actually an accident.) If mobile users can't get their mail, I'm going to have a big mess on my hands ...
What do I need to do to get this running properly for all users?
Thanks
CL
An ActiveSync session is being attempted with the server.
Errors were encountered while testing the Exchange ActiveSync session.
Additional Details
Elapsed Time: 793 ms.
Test Steps
Attempting to send the OPTIONS command to the server.
The OPTIONS response was successfully received and is valid.
Additional Details
HTTP Response Headers:
MicrosoftOfficeWebServer: 5.0_Pub
Pragma: no-cache
Public: OPTIONS, POST
Allow: OPTIONS
MS-Server-ActiveSync: 6.5.7638.1
MS-ASProtocolVersions: 1.0,2.0,2.1,2.5
Content-Length: 0
Date: Fri, 30 May 2014 08:49:48 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Elapsed Time: 205 ms.
Attempting the FolderSync command on the Exchange ActiveSync session.
The test of the FolderSync command failed.
Additional Details
An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response: <body><h2>HTTP/1.1 403 Forbidden</h2></body>
HTTP Response Headers:
MicrosoftOfficeWebServer: 5.0_Pub
Pragma: no-cache
MS-Server-ActiveSync: 6.5.7638.1
Content-Length: 44
Content-Type: text/html
Date: Fri, 30 May 2014 08:49:48 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Elapsed Time: 588 ms.

Hi --
Neither of the Exchange servers is publicly listed as the mail handler for this domain. Mail is preprocessed by a cloud spam filtering service before coming down. So I expect no changes in MX records -- not even a change in the spam filter's delivery IP
address, since that points to my firewall. I'll forward SMTP traffic to the new server when the time comes.
I was told by MS that moving the mailboxes would not disrupt anything as long as both SBS boxes were up and running. And despite what the Connectivity Analyzer showed, people in this office have been receiving email on their mobile phones all day. I've had
a few sporadic reports of people supposedly not getting email on their smartphones, but I can't see how anything I did (basically just move mailboxes at this point) could allow some people's phones to get mail while others' can't, when everyone was getting
mail yesterday.
I also have an odd report from someone who claims that his mobile phone is processing email just fine, but his MacBook running Entourage suddenly can't connect.
Oh well ... The day is over (at least for the workers). Hopefully by the time the workers return on Monday, I'll be back to having just one SBS box on the network.
The mailboxes are being moved A LOT faster than any of the documents I read warned me they would. One document said that a 75 GB database could take close to 48 hours to transfer. And this server's Exchange database was 67 GB ... But last night's
"accident" (I thought I was only prepping a new database when in fact the machine was actively moving email into it) resulted in about 40% of the mailboxes being completely moved by 8 a.m.. And since 5 p.m., when I restarted the move requests,
the machine has completed the moves of about 20% more mailboxes. So I expect this part to be over probably by early morning. (The ones that remain are the really big ones -- still, after I spent a week doing mailbox housekeeping.)
I was also warned about the lengthy conversion requirements for the public folders. I transferred those last weekend. The whole process was over with in less than four hours. Go figure ...
(The public folder transfer did have an annoying side effect -- I kept receiving warning after warning via email from the SBS 2003 box about a high number of items in Exchange's send queues ...)
Thanks
CL

Migrate from Server 2003 (no Exchange, single server) to SBS 2011

Are there any Technets or other Microsoft documentation on migrating from Server 2003 (no Exchange, single server) to SBS 2011? I understand it is possible, but I would like confirmation and some documentation before purchasing the appropriate hardware
and licenses.
Thanks,
Doug
Doug Orr

Hi Doug,
In general, the migration is the similar with migrating process from SBS 2003. In addition, also have main
difference.
“The main difference is that you don’t have to remove the source and that you have to follow the migration
instructions as the SBS migration wizard will not launch.”
You can get above description from following similar thread. Please refer to.
Migrate from Windows Server Standard 2003 (not SBS) to SBS 2011
http://social.technet.microsoft.com/Forums/en-US/68790e41-b833-4e81-8200-63852ab9e196/migrate-from-windows-server-standard-2003-not-sbs-to-sbs-2011?forum=smallbusinessserver
Meanwhile, please refer to the following article. It may be helpful.
Step By Step Guide To Migrating To SBS 2011
http://www.techieshelp.com/step-by-step-guide-to-migrating-to-sbs-2011/
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft
does not guarantee the accuracy of this information.
However, as Robert suggests, would you please confirm specific version of SBS? It may help us to understand
clearly and provide correct information.
Hope this helps.
Best regards,
Justin Gu

Server 2012 and Exchange 2013 Migration from SBS 2011

Server UpgradeI'm migrating an SBS 2011 server to a new machine with Server 2012 R2 and a Hyper-V server running Exchange 2013. I've set up the new machine, all is running well in a test environment. I now want to migrate the old server to new. These are the steps I'm going to take and I wanted advice for any modifications or errors. 1. Demote DC on Server 2012 that I set up to test. 2. Join new Server 2012 to existing SBS 2011 domain. 3. Promote Server 2012 to DC. 4. Join the Hyper-V Server 2012 to the Server 2012 domain.5. Migrate Exchange 2010 on the SBS 2011 Server to Exchange 2013. 6. Transfer FSMO role from SBS 2011 Server to Server 2012 DC. I'll copy shared data files using robocopy.The only things I'm not sure about is the FSMO order, when to do that and the fact that I already have Exchange 2013 installed in the test...
This topic first appeared in the Spiceworks Community

I recently acquired a SuperMicro chassis that has a SAS2 expander backplane. It has SFF-8087 ports on it.http://www.supermicro.com/manuals/other/BPN-SAS2-846EL.pdfI made a post on another forum and someone mentioned that the card couldn't be used with that backplane since it's a SATA controller, however, the backplane is both SAS and SATA device compliant, it's only the RAID controller, as far as I know, that is a "SATA II" controller, and not a SAS controller.So, I couldn't find anything in the official documentation of this controller on whether or not it was able to control SAS devices. The card itself has a 3 SFF-8087 ports though, couldn't this theoretically still be used with a SFF-8087 to SFF-8087 cable(seen below)since the backplane is a SAS/SATA backplane?...

Sort Global Address List by Last Name in Exchange (SBS 2011)

Hello
We Use SBS 2011 and outlook for interoffice mailing.
In our Company People Know each other by their Last Names. But in Outlook in Global Address List names are sorted by First Name alphabetically. I want, for example, when people type “C” in search box of
“Select Names: Global Address List” people who have Last Names beginning with C to be shown.
Thank You for answering

Hi,
Based on your description, please refer to following similar thread and check if can help you.
Exchange
Server 2007 Global Address List, Sort by LastName, FirstName
By the way, in
Select Names: Global Address List, did you click
Advanced Find option and type name in Last name tab in Find panel to search result? Was it will be an acceptable option?
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Exchange 2010 Rollup 2 SP3 update cannot find installation package exchangeserver.msi file on SBS 2011... NEED HELP!!!

Hello,
I am running a windows SBS 2011 standard system and there was currently an update for Exchange 2010 Rollup 2 Service Pack 3 and it keeps failing. It says that it cannot find the installation package (exchangeserver.msi) and it is looking for it
in E:\Software\Exchange2010-SP3-x64\ folder but there never was this folder. There is only an Exchange2010-SP3-x64.exe file.
The only exchangeserver.msi file that I find on the server any where is in C:\ProgramFiles\Windows Small Business Server\Bin\CMPNENTS\EXCHANGE14_SP1 but it won't accept it (says not authorized for this update or something alike).
Please help. It is currently causing issues with email. Some of the features are not working because it says exchange is currently under maintenance.
Any suggestions would be greatly appreciated. Thank you.

Susan you are correct: After I installed Exchange 2010 SP3, I deleted the msi just to "clean up' my hard disk... While trying to install Rollup 2 for SP3, the installer is trying to find it. I downloaded the installer, used 7-zip to get
the msi and I pointed the installer to it when asked.
The installation failed 3 times...
NOTE: I was using WSUS to install the Rollup: I downloaded the Rollup installer and I executed: I could see where the installer was hanging up! First it asked me to stop an SBS service and something else (sorry I do not remember), I stopped
the services and installation continued. Then it asked me for more files from the SP3 installation which I found on the installation folder that I created with 7-zip. I copied to the path that the installer was looking and installation finished
(finally!)...
NOTE 2: If you have any firewall appliance that denies Internet access to un-authenticated requests, you better turn that rule off because the installer accesses the internet (not sure why - probably for Dot Net assemblies)...
Susan THANKS for all your help to the community! You have helped so much!
All the Best
Constantine

SSL cert error on exchange 2013.

Hi,
Can I please have some help to avoid the following two error messages appears on opening outlook 2013 on windows 7 connected directly to the server 2012 domain.
Godaddy SSL cert is installed on mail.domain.com and firewall forwarding is properly setup.
There is NO error message if we connect through outlook (AnyWhere) on a system which is not part of the domain and connecting from outside.
Error Box 1
Security Alert
servername.localdomain.local
Information you exchange with this site cannot be viewed or changed...................
The security certificate is from a trusted certifying authority.
The security certificate date us valid
X The name on the security certificate is invalid or does not match the name of the site....
Error box 2
Microsoft Outlook
There is a problem with the proxy server's security certificate.
The name on the security certificate is invalid or does not match the name of the target site servername.localdomain.local
Outlook is unable to connect to the proxy server. (Error Code 10)
Any quick help will be highly appreciated!
Many thanks

Hi,
Are you using a Single domain cert by GoDaddy, if thats the case we cannot add more than one domain to your cert. I believe you have added the outlook anywhere domain name to your cert since your outlook anywhere connection is prompting any errors.
You have two options, one is purchase a UCC Cert and add all URL's required or Please have a look on these below Virtual Directories on the exchange server and modify the the URL's so you will not get the Cert errors.
use the shell to view the internal and external URL's,
Get-ActiveSyncVirtualDirectory | fl internalurl,externalurl
Get-AutoDiscoverVirtualDirectory | fl internalurl,externalurl
Get-ECPVirtualDirectory | fl internalurl,externalurl
Get-OabVirtualDirectory | fl internalurl,externalurl
Get-WebServicesVirtualDirectory | fl internalurl,externalurl
Change all your internal URL's similar to the external URL's, use the Set command as the example below.
Get-AutodiscoverVirtualDirectory -server EXCHANGE | Set-AutodiscoverVirtualDirectory -ExternalUrl ‘https://mail.domain.com/Autodiscover/Autodiscover.xml’
make sure all your servername.localdomain.local URL's are changed to match primary certificate name.
Regards
Boniface

Issue while installing Exchange 2010 SP3 in SBS 2011

I tried installing the SP3 on my SBS 2011 box but it asked for a Hotfix from KB2550886 to be installed. When I tried to install the Hotfix it said that it does not apply to my SBS 2011 box and did not install. However I went ahead with the installation
of SP3 but it stopped just before the final action. Thereafter I was unable to access my Exchange and in services the Microsoft Exchange Transport service kept on stopping despite starting it manually. Spent more than a day trying
to resolve the issue but when nothing came forward I had to rebuild my server (you may disagree with this step but I had no other solution) over the weekend.
I tried installing the SP3 but again it asked for the Hotfix. I have not proceeded with the installation of SP3 but have installed the SP 2 which I had preserved.
MS Exchange Best Practices Analyzer shows "Exchange store does not start". However when I follow the information in KB285116 I observe that everything is in order.
I would like to know the experience of other persons in this forum before I start the installation of SP3 once again.
Thanking you in advance.
Regards, Rajiv K Khandelwal

Hi,
After stopping the AV program services I tried installing but landed with the following problem:
Connecting to "SERVER.domain.local"
Logging in as current user using SSPI
Importing directory from file "C:\Windows\Temp\ExchangeSetup\Setup\Data\PostExchange2003_schema0.ldf"
Loading entries
1: CN=ms-Exch-ELC-Expiry-Action,CN=Schema,CN=Configuration,DC=DOMAIN,DC=local
Entry DN: CN=ms-Exch-ELC-Expiry-Action,CN=Schema,CN=Configuration,DC=DOMAIN,DC=local
Add error on entry starting on line 1: Operations Error
The server side error is: 0x21a2 The FSMO role ownership could not be verified because its directory partition has not replicated successfully with at least one replication partner.
The extended server error is:
000021A2: SvcErr: DSID-030A0AE6, problem 5012 (DIR_ERROR), data 8610
0 entries modified successfully.
An error has occurred in the program
I tried the solution as provided in
http://social.technet.microsoft.com/Forums/exchange/en-US/de047852-fa94-4327-b518-94d6b25b1101/schema-error but did not succeed.
I am wondering whether to leave the thing as it is.
Regards, Rajiv K Khandelwal

Exchange SSL cert renewal on SBS 2011

Similar Messages

Maybe you are looking for