Unanswered SSL Certificate Renewal

  • Monday, March 04, 2013 9:23 AM
     
     

    Hello,

    My existing SSL certificate has expired, and needed to be renewed. I've received my new cert, and imported to my server. I've tried a few different ways to replace my existing cert:

    - Import into local machine store, update IIS bindings. Update RD Gateway cert. Update SSTP binding.
    - Run Domain Config wizard, use existing cert, supply newly received cert PFX. Run repair on access anywhere.

    No matter which method used, while the new cert works for a day or 2, it eventually reverts to the machines self signed cert resulting in errors. I can't find an event that correlates to reverting certificates, so I'm at a real loss as to what's taking place.

    Any guidance on how to complete this scenario properly?

    Thanks,
    Tim

All Replies

  • Monday, March 04, 2013 12:51 PM
    Moderator
     
     

    I would run the Anywhere Access wizard and turn off RWA.

    Reboot.

    Run it again and import the new certificate from PFX.


    Robert Pearman SBS MVP
    itauthority.co.uk | Title(Required)
    Facebook | Twitter | Linked in | Google+

  • Monday, March 04, 2013 6:58 PM
     
     

    Thanks Robert, I'll give that a go. A reboot never hurt anyone ;)

    Have I missed the guidance on how to perform a cert renewal though? Would think this is a fairly common procedure.

    Thanks,
    Tim

  • Monday, March 04, 2013 8:32 PM
    Moderator
     
     

    Guidance is few and far between right now.

    Best thing to remember is that the 'renewal' is essentially a term for the process, but not what you're doing.

    Im paraphrasing slightly, but the process is identical to purchasing a new SSL, it just happens to have the same name.

    So, you can go through the process here:

    http://titlerequired.com/2013/02/06/manually-creating-a-certificate-request-windows-server-essentials-sbs/


    Robert Pearman SBS MVP
    itauthority.co.uk | Title(Required)
    Facebook | Twitter | Linked in | Google+

  • Tuesday, March 05, 2013 6:22 PM
     
     

    No dice :( Cert still reverts to the servers self signed cert from my purchased SSL cert.

    Very strange...

  • Tuesday, March 19, 2013 4:09 PM
     
     

    Hello Robert,

    I am exactly in the same situation as "tsull360". I have to renew my existing certificate from GoDaddy and I don't find any instructions how to do it. What is the exact procedure on how to renew an existing certificate using Anywhere Access wizards? Meanwhile, I have looked at your "RWA & SSL Configuration Decision-o-Matic" chart from your site (http://titlerequired.com/2013/02/06/manually-creating-a-certificate-request-windows-server-essentials-sbs/) and figured that my newly issued certificate has to be imported as a PFX file into W2k12srve. Is this correct? If so, how do I manage to get this PFX file from GoDaddy?

    Regards,


    Yves Leduc