All, We had a bit of a scramble when an IIS SSL cert generated by our internal CA expired, and didn't autorenew.
Now that I've fixed it, I'm wondering how to set up autorenewal, >From my reading so far, it looks like I need to set up an SPN for the web site on the machine account, vis: http://social.technet.microsoft.com/Forums/windowsserver/en-US/0b435135-5a90-4957-9bcc-a92b4c519fda/autoenrollment-for-web-server-certificates and http://support.microsoft.com/kb/929650 Is this correct, and sufficient? Or do I need to dig a little deeper? Kurt
