From: Billy Leung on
Hi all,

I am having a problem with our exchange server in the sbs2003.

In exchange system manager, I tried to click the "+" box next to "Public
Folders". It then pop up an error message -- "The received certificate has
expired. ID no: 80090328". This prevent me from changing the properties of
the folders.

I was told that the certicate for the publish web server is overdue and we
should obtain a new certificate.

But we don't understand why and what certificate is overdue. Should we pay
for this? Actually, our company does not use web server nor outlook web
access.

What should I do to resolve this problem?

Billy



From: Ace Fekay [MCT] on
"Billy Leung" <billy(a)dont.send.me.mail.com> wrote in message
news:O3hQ6tRjKHA.1540(a)TK2MSFTNGP06.phx.gbl...
> Hi all,
>
> I am having a problem with our exchange server in the sbs2003.
>
> In exchange system manager, I tried to click the "+" box next to "Public
> Folders". It then pop up an error message -- "The received certificate has
> expired. ID no: 80090328". This prevent me from changing the properties of
> the folders.
>
> I was told that the certicate for the publish web server is overdue and we
> should obtain a new certificate.
>
> But we don't understand why and what certificate is overdue. Should we pay
> for this? Actually, our company does not use web server nor outlook web
> access.
>
> What should I do to resolve this problem?
>
> Billy
>
>


Were you using a cert from an installed CA in your organization? If so, you
can generate a new one. Also, you can go into IIS and remove the required
SSL settings on the Exadmin folder subweb so it doesn't use the cert. Matter
of fact, you really only need it on a few subwebs. Read teh following for
more info.

You receive an SSL Certificate error message when you view public folders in
Exchange System Manager
http://support.microsoft.com/Default.aspx?id=324345

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

If you feel this is an urgent issue and require immediate assistance, please
contact Microsoft CSS directly. Please check http://support.microsoft.com
for regional support phone numbers.




From: Robbin on

Hello Billy,

Thanks for your post and Ace's input.

I agree with Ace that the cause was usually an expired security certificate
on the Default Web Site.

As Ace indicated, you have 2 options, either remove the SSL certificate and
restart the IIS. Or renew SSL certificate by using internal Certificate
Authority(SBS itself) that has not expired and assign it to Default Web Site.

Hope this helps. Also, if you have any questions or concerns, please do not
hesitate to let me know.


Sincerely,
Robbin Meng
Microsoft Online Newsgroup Support


"Billy Leung" wrote:

> Hi all,
>
> I am having a problem with our exchange server in the sbs2003.
>
> In exchange system manager, I tried to click the "+" box next to "Public
> Folders". It then pop up an error message -- "The received certificate has
> expired. ID no: 80090328". This prevent me from changing the properties of
> the folders.
>
> I was told that the certicate for the publish web server is overdue and we
> should obtain a new certificate.
>
> But we don't understand why and what certificate is overdue. Should we pay
> for this? Actually, our company does not use web server nor outlook web
> access.
>
> What should I do to resolve this problem?
>
> Billy
>
>
>
> .
>
From: Billy Leung on
Hello Robbin and Ace,

Many thank for your input. But,

1) I am not sure what CA you are referring to? Do we need to pay money for
this? Is this related to licsensing? Should I contact Microsoft? If yes,
why? (Because when I bought the licsense at the very beginning, it seems no
one told me to pay money for maintenance the licsense!?) Or we need to pay
money for the web that open to public?

2) understand that the problem can be solved by using internal certificate
authority. can you please provide link for this. thanks a lot.

3) I tried to remove the SSL certificate as described. But it does not work.
Do I need to restart the server?

Thanks for your help


Billy




"Robbin" <Robbin(a)discussions.microsoft.com> wrote in message
news:E126588E-586A-46BB-BDD8-CD180DC71F31(a)microsoft.com...
>
> Hello Billy,
>
> Thanks for your post and Ace's input.
>
> I agree with Ace that the cause was usually an expired security
> certificate
> on the Default Web Site.
>
> As Ace indicated, you have 2 options, either remove the SSL certificate
> and
> restart the IIS. Or renew SSL certificate by using internal Certificate
> Authority(SBS itself) that has not expired and assign it to Default Web
> Site.
>
> Hope this helps. Also, if you have any questions or concerns, please do
> not
> hesitate to let me know.
>
>
> Sincerely,
> Robbin Meng
> Microsoft Online Newsgroup Support
>
>
> "Billy Leung" wrote:
>
>> Hi all,
>>
>> I am having a problem with our exchange server in the sbs2003.
>>
>> In exchange system manager, I tried to click the "+" box next to "Public
>> Folders". It then pop up an error message -- "The received certificate
>> has
>> expired. ID no: 80090328". This prevent me from changing the properties
>> of
>> the folders.
>>
>> I was told that the certicate for the publish web server is overdue and
>> we
>> should obtain a new certificate.
>>
>> But we don't understand why and what certificate is overdue. Should we
>> pay
>> for this? Actually, our company does not use web server nor outlook web
>> access.
>>
>> What should I do to resolve this problem?
>>
>> Billy
>>
>>
>>
>> .
>>



From: Ace Fekay [MCT] on
"Billy Leung" <billy(a)dont.send.me.mail.com> wrote in message
news:eiKz$kdjKHA.5052(a)TK2MSFTNGP04.phx.gbl...
> Hello Robbin and Ace,
>
> Many thank for your input. But,
>
> 1) I am not sure what CA you are referring to? Do we need to pay money for
> this? Is this related to licsensing? Should I contact Microsoft? If yes,
> why? (Because when I bought the licsense at the very beginning, it seems
> no one told me to pay money for maintenance the licsense!?) Or we need to
> pay money for the web that open to public?
>
> 2) understand that the problem can be solved by using internal certificate
> authority. can you please provide link for this. thanks a lot.
>
> 3) I tried to remove the SSL certificate as described. But it does not
> work. Do I need to restart the server?
>
> Thanks for your help
>
>
> Billy
>

The CA is built-in with SBS. Remove your current cert, and generate a new
request and install it. Take a look at the following site for a step-by step
how to. Scroll past the part of installing the CA to the part where it shows
how to create the request in IIS. I thought there was a Microsoft link on
this, but I can't find it, but this site has step by steps with pictures
that are easy to follow.

SSL Enabling OWA 2003 using your own Certificate AuthorityJul 20, 2004 ...
The first thing to do is to decide which server should hold the Certicate
Authority (CA) role, it could be any server as long as it's at ...
http://www.msexchange.org/tutorials/SSL_Enabling_OWA_2003.html

Ace