Hi all,

I am having a problem with our exchange server in the sbs2003.

In exchange system manager, I tried to click the "+" box next to "Public
Folders". It then pop up an error message -- "The received certificate has
expired. ID no: 80090328". This prevent me from changing the properties of
the folders.

I was told that the certicate for the publish web server is overdue and we
should obtain a new certificate.

But we don't understand why and what certificate is overdue. Should we pay
for this? Actually, our company does not use web server nor outlook web
access.

What should I do to resolve this problem?

Billy

"Billy Leung" <billy@newsgroup> wrote in message
news:O3hQ6tRjKHA.1540@newsgroup

> Hi all,
>
> I am having a problem with our exchange server in the sbs2003.
>
> In exchange system manager, I tried to click the "+" box next to "Public
> Folders". It then pop up an error message -- "The received certificate has
> expired. ID no: 80090328". This prevent me from changing the properties of
> the folders.
>
> I was told that the certicate for the publish web server is overdue and we
> should obtain a new certificate.
>
> But we don't understand why and what certificate is overdue. Should we pay
> for this? Actually, our company does not use web server nor outlook web
> access.
>
> What should I do to resolve this problem?
>
> Billy
>
>

Were you using a cert from an installed CA in your organization? If so, you
can generate a new one. Also, you can go into IIS and remove the required
SSL settings on the Exadmin folder subweb so it doesn't use the cert. Matter
of fact, you really only need it on a few subwebs. Read teh following for
more info.

You receive an SSL Certificate error message when you view public folders in
Exchange System Manager
http://support.microsoft.com/Default.aspx?id=324345

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

If you feel this is an urgent issue and require immediate assistance, please
contact Microsoft CSS directly. Please check http://support.microsoft.com
for regional support phone numbers.

Hello Billy,

Thanks for your post and Ace's input.

I agree with Ace that the cause was usually an expired security certificate
on the Default Web Site.

As Ace indicated, you have 2 options, either remove the SSL certificate and
restart the IIS. Or renew SSL certificate by using internal Certificate
Authority(SBS itself) that has not expired and assign it to Default Web Site.

Hope this helps. Also, if you have any questions or concerns, please do not
hesitate to let me know.


Sincerely,
Robbin Meng
Microsoft Online Newsgroup Support


"Billy Leung" wrote:

> Hi all,
>
> I am having a problem with our exchange server in the sbs2003.
>
> In exchange system manager, I tried to click the "+" box next to "Public
> Folders". It then pop up an error message -- "The received certificate has
> expired. ID no: 80090328". This prevent me from changing the properties of
> the folders.
>
> I was told that the certicate for the publish web server is overdue and we
> should obtain a new certificate.
>
> But we don't understand why and what certificate is overdue. Should we pay
> for this? Actually, our company does not use web server nor outlook web
> access.
>
> What should I do to resolve this problem?
>
> Billy
>
>
>
> .
>

Hello Robbin and Ace,

Many thank for your input. But,

1) I am not sure what CA you are referring to? Do we need to pay money for
this? Is this related to licsensing? Should I contact Microsoft? If yes,
why? (Because when I bought the licsense at the very beginning, it seems no
one told me to pay money for maintenance the licsense!?) Or we need to pay
money for the web that open to public?

2) understand that the problem can be solved by using internal certificate
authority. can you please provide link for this. thanks a lot.

3) I tried to remove the SSL certificate as described. But it does not work.
Do I need to restart the server?

Thanks for your help


Billy




"Robbin" <Robbin@newsgroup> wrote in message
news:E126588E-586A-46BB-BDD8-CD180DC71F31@newsgroup

>
> Hello Billy,
>
> Thanks for your post and Ace's input.
>
> I agree with Ace that the cause was usually an expired security
> certificate
> on the Default Web Site.
>
> As Ace indicated, you have 2 options, either remove the SSL certificate
> and
> restart the IIS. Or renew SSL certificate by using internal Certificate
> Authority(SBS itself) that has not expired and assign it to Default Web
> Site.
>
> Hope this helps. Also, if you have any questions or concerns, please do
> not
> hesitate to let me know.
>
>
> Sincerely,
> Robbin Meng
> Microsoft Online Newsgroup Support
>
>
> "Billy Leung" wrote:
>

>> Hi all,
>>
>> I am having a problem with our exchange server in the sbs2003.
>>
>> In exchange system manager, I tried to click the "+" box next to "Public
>> Folders". It then pop up an error message -- "The received certificate
>> has
>> expired. ID no: 80090328". This prevent me from changing the properties
>> of
>> the folders.
>>
>> I was told that the certicate for the publish web server is overdue and
>> we
>> should obtain a new certificate.
>>
>> But we don't understand why and what certificate is overdue. Should we
>> pay
>> for this? Actually, our company does not use web server nor outlook web
>> access.
>>
>> What should I do to resolve this problem?
>>
>> Billy
>>
>>
>>
>> .
>>

Hi Billy,

Thanks for your reply.

Yes, the CA server is built-in with SBS server. It is not licensing related and you don't need pay extra money, neither for the your license nor for the public SBS newsgroup
service, it is open and free. Any registered community members, MVPs as well as MSFT engineers can share ideas and information here.

Regarding the link you referred to, I think Ace has pointed a good one which explains how to request a new SSL certificate and how to enable it on the Default Website. Here is
another article which may help you too:

Creating, Obtaining, and Installing Trusted Certificates in a Windows SBS 2003 Network Environment
http://technet.microsoft.com/en-us/l...19(WS.10).aspx


More information about building a CA in Windows server domain:

Building an Enterprise Root Certification Authority in Small and Medium Businesses
http://technet.microsoft.com/en-us/l.../cc700804.aspx

Hope this helps.



Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support

Hi all,

Such a long procedure to do so !!? I will have to try to remove SSL from the
Exadmin virtual root in IIS. But it seems it does not work. Do I need to
re-start the server?

Billy



""Robbin Meng [MSFT]"" <v-robmen@newsgroup> wrote in message
news:vcVdwUojKHA.2488@newsgroup

>
>
> Hi Billy,
>
> Thanks for your reply.
>
> Yes, the CA server is built-in with SBS server. It is not licensing
> related and you don't need pay extra money, neither for the your license
> nor for the public SBS newsgroup
> service, it is open and free. Any registered community members, MVPs as
> well as MSFT engineers can share ideas and information here.
>
> Regarding the link you referred to, I think Ace has pointed a good one
> which explains how to request a new SSL certificate and how to enable it
> on the Default Website. Here is
> another article which may help you too:
>
> Creating, Obtaining, and Installing Trusted Certificates in a Windows SBS
> 2003 Network Environment
> http://technet.microsoft.com/en-us/l...19(WS.10).aspx
>
>
> More information about building a CA in Windows server domain:
>
> Building an Enterprise Root Certification Authority in Small and Medium
> Businesses
> http://technet.microsoft.com/en-us/l.../cc700804.aspx
>
> Hope this helps.
>
>
>
> Best regards,
> Robbin Meng(MSFT)
> Microsoft Online Newsgroup Support
>
>

Hi Billy,

Regarding the blog article Ace provided, you may begin with the "Creating the Certificate Request" part to request a new certificate. If you think it is too long for you to follow up, you may refer to the
below TechNet article, it is for SBS 2003:

Creating, Obtaining, and Installing Trusted Certificates in a Windows SBS 2003 Network Environment
http://technet.microsoft.com/en-us/l...19(WS.10).aspx

BTW, you should remove the current expired certificate on Default Web site and restart IIS service using "iisreset /noforce".

Hope this helps.



Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support