Tuesday, July 10, 2012

Even easier way for a new self signed cert!

On the SBS server run MMC.EXE and add the snap-in for Certificates and for certificate templates. For the certificate console you will be asked what you will be managing the certs for, select Computer Account. In the next window select local computer. In the MMC select cert. templates and find Web Server, right click the web server template and select properties then the security tab. Add the local computer to the list of users permissions and select Enroll as a right. Click on Certificates (Local Computer) and open “Personal – Certificates” Right click on certificates and request a new cert. Select next twice and choose web server and click on the blue words indicating more information is neeeded. Subject name box, select common name and enter the value as : remote/mail. yourdomain .com and add it. In the second box select DNS and enter the other names the cert should have: domain.com remote/mail.domain.com internaldomain.local autodiscover.domain.com servername. Select Ok and enroll. Open IIS and go to default web site bindings, select HTTPS and Edit and select your new cert. If you not sure which cert you want to use, select it then choose view.

1 comment:

  1. You can check the private key tab during the creation to make the key exportable.

    ReplyDelete