How Do I Distribute the SBS 2008 Self-Signed SSL Certificate to My Users?

Can the CA create a UCC cert with multiple domains or wildcard cert?

SLC — Wed, 01 Oct 2008 01:52:15 GMT

Can the CA create a UCC cert with multiple domains or wildcard cert?

re: How Do I Distribute the SBS 2008 Self-Signed SSL Certificate to My Users?

Aristarkhos — Wed, 01 Oct 2008 09:39:42 GMT

This is was helpful, thanks.

I have a few questions tho...creating a self-signed certificate from within the IIS Manager, makes the certificate useful only within the SBS domain...is that correct?

And, if i change my external domain name, create a new self-signed cert, why is it that i don't have to install it on client PCs/mobile devices.

Finally, if I use a trusted cert, how should i deploy it to client PCs/mobile devices. Can I use the installer tool for the trusted cert?

SBS 2008: Distribute self-signed SSL Certificate to users

SBS 2008: Distribute self-signed SSL Certificate to users — Wed, 01 Oct 2008 10:39:05 GMT

PingBack from http://www.ditii.com/2008/09/30/sbs-2008-distribute-self-signed-ssl-certificate-to-users/

re: How Do I Distribute the SBS 2008 Self-Signed SSL Certificate to My Users?

SBS Bloggers — Wed, 01 Oct 2008 19:47:51 GMT

SLC,

The CA that is installed on SBS 2008 can issue both wildcard certificates and certificates with multiple subject alternative names. In fact, the certificate that is created by the Internet Address Management Wizard and issued by the CA has 3 SANs by default.

re: How Do I Distribute the SBS 2008 Self-Signed SSL Certificate to My Users?

SBS Bloggers — Wed, 01 Oct 2008 20:56:04 GMT

Aristarkhos,

The self-signed certificate created in the IIS manager 7 by running the "Create Self-Signed Certificate" wizard does not include your external fully qualified domain name, only the internal FQDN of your server, so this is not the certificate you should be using from the internet. You need to create your certificate by running the Internet Address Management Wizard (IAMW) or purchase a trusted 3rd party certificate.

When you change your external domain name with the IAMW, you are only changing the leaf certificate, not the CA certificate. Clients that have the CA certifcate installed into their trusted store (via the certificate distribution package) will trust the new leaf certificate automatically.

On the third question, trusted certificates are issued by publicly trusted CAs. You do not need to install these kinds of certificates on your PCs or mobile devices.

re: How Do I Distribute the SBS 2008 Self-Signed SSL Certificate to My Users?

Wayne — Fri, 03 Oct 2008 16:54:45 GMT

Since there are more mobile 5 devices in current use than mobile 6, it is interesting that you didn't mention support for mobile 5, or will SBS 2008 no longer support mobile 5.

re: How Do I Distribute the SBS 2008 Self-Signed SSL Certificate to My Users?

SBS Bloggers — Fri, 03 Oct 2008 23:23:13 GMT

SBS 2008 supports synching with Windows Mobile 5.0, but you must install the certificate manually (Same as SBS 2003) on the device.

SBS2008 WOW Fact #3

KWSupport — Fri, 10 Oct 2008 21:28:52 GMT

So, you're happy that OWA (WOW Fact #1) and RWW (WOW Fact #2) are improved in SBS 2008. But, now

re: How Do I Distribute the SBS 2008 Self-Signed SSL Certificate to My Users?

Chase Hansen — Wed, 15 Oct 2008 02:12:43 GMT

I am having the hardest time with this, I don't have the InstallCertificate.exe files. my Public Downloads folder was deleted (not knowing I needed it).

I have looked through the log but I can't see where its placing it anywhere else, I found the InstallCertificate.exe program but where is the cert file that it needs? does it need any other files? how do I restore this functionality.

re: How Do I Distribute the SBS 2008 Self-Signed SSL Certificate to My Users?

SBS Bloggers — Thu, 16 Oct 2008 00:13:45 GMT

Hi Chase,

Open IE on the server and go to Internet Options > Content > Certificates and export the SBS root CA certificate. Recreate the Public Downloads directory manually (make sure it is shared)and copy in the certficate file and the InstallCertificate.exe.

I assume that you have found a copy of InstallCertificate.exe in the %programfiles%\Windows Small Business Server\bin directory. If this file had been missing also, then you could retrieve this through backup, from another SBS 2008 server, or you could use imagex to mount the install.wim from the SBS DVD and copy it from there:

http://technet.microsoft.com/en-us/library/cc748966.aspx

re: How Do I Distribute the SBS 2008 Self-Signed SSL Certificate to My Users?

Richard Warren — Thu, 16 Oct 2008 23:08:39 GMT

For those of us still with Windows Mobile 5 PDA's like Verizons XV6700 where we have to manually install the certificate, could you point me (us) to a step-by-step for doing that?

re: How Do I Distribute the SBS 2008 Self-Signed SSL Certificate to My Users?

SBS Bloggers — Fri, 17 Oct 2008 18:45:09 GMT

Hi Richard,

Check out the section titled "Option A: Configure a Self-Signed Certificate". This explains the "how to" for installing the SBS 2003 cert onto a Mobile 5 device, but the steps are identical for SBS 2008 certs.

http://technet.microsoft.com/en-us/library/cc747512.aspx

Introducing the Internet Address Management Wizard: Part 3 of 3

The Official SBS Blog — Fri, 17 Oct 2008 18:49:37 GMT

[Today's post comes to us courtesy of Ed Walters, Shawn Sullivan, and Justin Crosby] Today we finish

How Outlook 2007 and Windows Mobile 6.1 Use Autodiscover with SBS 2008

The Official SBS Blog — Thu, 04 Dec 2008 21:51:32 GMT

[Today's post comes to us courtesy of Rituraj Choudhary and Shawn Sullivan] After the completion of SBS