[Today's post comes to us courtesy of Sharique Ahmed]
This article describes how to use the Update Certificates Wizard of your Windows Essential Business Server (EBS) servers. Running the Update Certificates Wizard automates the renewal of Windows Essential Business Server (EBS) SSL certificates.
Windows EBS installs the Active Directory Certificate Services server role on the Management Server. This creates a single-tier enterprise public key infrastructure (PKI) hierarchy with a certification authority that is specific to the Windows EBS domain. This private certification authority issues self-signed certificates that are used by default by Forefront TMG for publishing secure Web sites such as Outlook Web Access and Remote Web Workplace.
To update the certificates for Internet access that are issued by Windows EBS, use the Update Certificates Wizard. Certificates that are issued by Windows EBS typically expire after two years. It is recommended that you update each certificate before its expiration date to ensure that your Security Server and Messaging Server function normally.
The wizard can update the following private Secure Sockets Layer (SSL) certificates:
NOTE: You cannot use the Update Certificates Wizard to update any certificate that is not issued by Windows EBS.
IMPORTANT: Updating your certificates briefly interrupts Internet connectivity and client access to Microsoft Exchange through Outlook Web Access. To minimize impact to users on your network, update certificates during a scheduled service maintenance period.
To update the SSL certificates: