Prev: SBS BPA 2008: WARNING: DNS name server records do not exists
Next: SBS 2008 - No Incoming Mail
From: Merv Porter [SBS-MVP] on 28 Mar 2010 17:07
Would this work?

Remove-ExchangeCertificate -thumbprint "XXXXXXXXXXXXXXXXXXXXXX"

How to Manually Install Certificates in SBS 2008
http://blogs.technet.com/sbs/archive/2009/12/14/how-to-manually-install-certificates-in-sbs-2008.aspx

(see section 6 for getting the Thumbprint)

--
Merv Porter [SBS-MVP]
============================

"anthony" <anthony.marrian(a)gmail.com> wrote in message
news:ca5629b1-b3fe-4e18-be92-74e4e3896c8c(a)e7g2000yqf.googlegroups.com...
> On Mar 28, 7:12 pm, "Andrew M. Saucci, Jr." <spam-
> o...(a)2000computer.local> wrote:
>> You don't HAVE to use remote.whatever.com; it's just a default
>> and
>> a convention. I used "mail.whatever.com" as my inbound access convention
>> for
>> years with SBS 2003-- saved me the trouble of having a second A record
>> pointing to the same address. I'm sure the wizard will let you use
>> "whatever.com" for remote access if that's easier and saves the trouble
>> of
>> getting a new certificate. It just requires an A record pointing to the
>> top
>> of whatever.com (usually a blank host name in the DNS configuration). It
>> would mean that someone putting "whatever.com" into a web browser would
>> go
>> to the SBS and not an externally hosted web site. For
>> that,www.whatever.com
>> would become necessary. That may be a bit of a price to pay, assuming
>> that
>> the domain has a public web site associated with it; lots of people don't
>> type "www" before a domain name. If the domain has no public web site, no
>> problem.
>>
>> "anthony" <anthony.marr...(a)gmail.com> wrote in message
>>
>> news:cb78f281-6baf-4e09-a095-eb9379cca962(a)j21g2000yqh.googlegroups.com...
>>
>> > As I know nothing about certificates, I went to a supplier (telling
>> > them this was SBS 2008) who gave me advice, suggested I use their
>> > website utility to create a CSR and sold me a GlobalSign SAN SSL
>> > certificate. I hadn't appreciated that the certificate wizard
>> > generates a perfectly good CSR all on its own. I now discover that
>> > their advice to use my internet domain name (as in mydomain.com) as
>> > the common name is wrong because the SBS wizard defaults to
>> > remote.mydomain.com (which is what I want). At first they said I'd
>> > need to pay for another certificate. Then they said they had added
>> > remote.mydomain.com to the list and I should reissue the CSR again
>> > with the common name of mydomain.com (as before) so they could reissue
>> > the certificate. I don't see how issuing a CSR with the common name as
>> > mydomain.com in order to receive a certificate which has
>> > remote.mydomain.com in its list is going to help because the wizard is
>> > still going set everything up as mydomain.com and not
>> > remote.mydomain.com. What should I do?
>
> There is a public site and although I agree with you about the
> feasibility of dispensing with remote, I'd rather stick to the SBS
> conventions. Also quite a lot of stuff is set up for
> remote.mydomain.com (but on the self-certified certificate), or it was
> until I broke it by running "Import-ExchangeCertificate -Path C:
> \mydomain.com.cer | Enable-ExchangeCertificate -Services "SMTP, IMAP,
> POP, IIS". I'm now trying to figure out whether I can avoid a support
> call to MS. I'm hoping that a proper certificate added via the wizard
> followed by the Fix my Network wizard (which currently fails on the
> Exchange portion) will restore matters

From: anthony on 29 Mar 2010 04:18
On Mar 28, 10:07 pm, "Merv Porter [SBS-MVP]"
<mwport(a)no_spam_hotmail.com> wrote:
> Would this work?
>
> Remove-ExchangeCertificate -thumbprint "XXXXXXXXXXXXXXXXXXXXXX"
>
> How to Manually Install Certificates in SBS 2008http://blogs.technet.com/sbs/archive/2009/12/14/how-to-manually-insta...
>
> (see section 6 for getting the Thumbprint)
>
> --
> Merv  Porter   [SBS-MVP]
> ============================


Yes, I'd printed the get-command list to a text file and searched for
every instance of Exchange until I came (Voila!) to remove-exchange
certificate - LOL. I haven't dared try it yet though. Thank you for
the Technet link. That will be very useful

Best
First  |  Prev  | 
Pages: 1 2
Prev: SBS BPA 2008: WARNING: DNS name server records do not exists
Next: SBS 2008 - No Incoming Mail