From: Bill Glidden on
I decided to install a trusted cert from GoDaddy to make access to RWW,
OWA and Outlook Anywhere more user-friendly. I used:
http://smbtn.wordpress.com/2009/02/12/installing-a-godaddy-standard-ssl-certificate-on-sbs-2008/
for my first few attempts (installing the intermediate bundle) and when
I had issues with this, I eventually used:
http://blogs.technet.com/sbs/archive/2008/09/20/introducing-the-add-a-trusted-certificate-wizard-in-sbs-2008.aspx
I have had several goes at this (using re-keyed certs)always with the
same results:

1. The trusted certificate never appears for selection as the preferred
certificate in the Certificate Wizard(only self-signed certs are
displayed). In the SBS Console, Network/Connectivity/Web Server
Certificate is showing the trusted cert from GoDaddy.

2. When I launch Outlook 2007, I get two Security Alerts from the site
remote.glidden.net.au. View Certificate shows the name of the trusted
cert office.glidden.net.au. This happens on PCs that are not using
Outlook Anywhere as well.

Otherwise the trusted certificate is functioning: no certificate warning
nags in RWW, OWA or Company Website.

A clue to all this is that the name of the trusted cert is different to
the self-signed one. Also, I run the fix my network wizard it tells me
that the trusted certificate has expired and removes it if checked.
I am new to and pretty clueless with certs: this is the first time i
have tried to install a trusted cert.

SBS BPA finds no issues.

Can someone please help me to sort this? Driving me bananas.
From: Les Connor [SBS MVP] on
Hi Bill,

I'm assuming you use https://remote.blah.blah/remote or /owa to acces your
SBS, but your cert is for office.blah.blah.

If you use https://office.blah.blah/remote, your cert matches and you get no
warning. I looked at your cert, and it looks fine.


--
-----------------------------------------------
Les Connor [SBS MVP]

"Bill Glidden" <bill(a)glidden.net.au> wrote in message
news:eHz12KWQKHA.220(a)TK2MSFTNGP02.phx.gbl...
> I decided to install a trusted cert from GoDaddy to make access to RWW,
> OWA and Outlook Anywhere more user-friendly. I used:
> http://smbtn.wordpress.com/2009/02/12/installing-a-godaddy-standard-ssl-certificate-on-sbs-2008/
> for my first few attempts (installing the intermediate bundle) and when I
> had issues with this, I eventually used:
> http://blogs.technet.com/sbs/archive/2008/09/20/introducing-the-add-a-trusted-certificate-wizard-in-sbs-2008.aspx
> I have had several goes at this (using re-keyed certs)always with the same
> results:
>
> 1. The trusted certificate never appears for selection as the preferred
> certificate in the Certificate Wizard(only self-signed certs are
> displayed). In the SBS Console, Network/Connectivity/Web Server
> Certificate is showing the trusted cert from GoDaddy.
>
> 2. When I launch Outlook 2007, I get two Security Alerts from the site
> remote.glidden.net.au. View Certificate shows the name of the trusted cert
> office.glidden.net.au. This happens on PCs that are not using Outlook
> Anywhere as well.
>
> Otherwise the trusted certificate is functioning: no certificate warning
> nags in RWW, OWA or Company Website.
>
> A clue to all this is that the name of the trusted cert is different to
> the self-signed one. Also, I run the fix my network wizard it tells me
> that the trusted certificate has expired and removes it if checked.
> I am new to and pretty clueless with certs: this is the first time i have
> tried to install a trusted cert.
>
> SBS BPA finds no issues.
>
> Can someone please help me to sort this? Driving me bananas.

From: Les Connor [SBS MVP] on
ps, you can change remote.blah.blah to office.blah.blah in the SBS wizard by
selecting the 'advanced' button. 'remote' is the default prefix.

--
-----------------------------------------------
Les Connor [SBS MVP]

"Bill Glidden" <bill(a)glidden.net.au> wrote in message
news:eHz12KWQKHA.220(a)TK2MSFTNGP02.phx.gbl...
> I decided to install a trusted cert from GoDaddy to make access to RWW,
> OWA and Outlook Anywhere more user-friendly. I used:
> http://smbtn.wordpress.com/2009/02/12/installing-a-godaddy-standard-ssl-certificate-on-sbs-2008/
> for my first few attempts (installing the intermediate bundle) and when I
> had issues with this, I eventually used:
> http://blogs.technet.com/sbs/archive/2008/09/20/introducing-the-add-a-trusted-certificate-wizard-in-sbs-2008.aspx
> I have had several goes at this (using re-keyed certs)always with the same
> results:
>
> 1. The trusted certificate never appears for selection as the preferred
> certificate in the Certificate Wizard(only self-signed certs are
> displayed). In the SBS Console, Network/Connectivity/Web Server
> Certificate is showing the trusted cert from GoDaddy.
>
> 2. When I launch Outlook 2007, I get two Security Alerts from the site
> remote.glidden.net.au. View Certificate shows the name of the trusted cert
> office.glidden.net.au. This happens on PCs that are not using Outlook
> Anywhere as well.
>
> Otherwise the trusted certificate is functioning: no certificate warning
> nags in RWW, OWA or Company Website.
>
> A clue to all this is that the name of the trusted cert is different to
> the self-signed one. Also, I run the fix my network wizard it tells me
> that the trusted certificate has expired and removes it if checked.
> I am new to and pretty clueless with certs: this is the first time i have
> tried to install a trusted cert.
>
> SBS BPA finds no issues.
>
> Can someone please help me to sort this? Driving me bananas.

From: Bill Glidden on
Les Connor [SBS MVP] wrote:
> Hi Bill,
>
> I'm assuming you use https://remote.blah.blah/remote or /owa to acces
> your SBS, but your cert is for office.blah.blah.
>
> If you use https://office.blah.blah/remote, your cert matches and you
> get no warning. I looked at your cert, and it looks fine.
>
>
Hi Les,

No. I use either remote or office, and want to use office only, but i
get the same result with either. I know there is no error when I use
/owa or /remote. I'm only seeing the Outlook security warning.
From: Bill Glidden on
Les Connor [SBS MVP] wrote:
> ps, you can change remote.blah.blah to office.blah.blah in the SBS
> wizard by selecting the 'advanced' button. 'remote' is the default prefix.
>
I missed that Advanced button... Will go there and do that. Thanks, Les.