No SBS does not have certificate services installed in either Std or
Premium.  It creates its own certificate once for 5 years from the date
it was setup.

 

You can try open certificates for local computer under the mmc and right
click at the top.  It will give you an option to find all certificates.
Type the fqdn for the server.  Right click on the certificate that is
expired and click renew certificate with new key.  Chances are though
its going to tell you it cannot renew it since there is no CA.

 

CEICW will allow you to generate a new cert with another 5 years on it.
You will of course have to redeploy it out.

 

Greg

 

 

 

From: Ken Schaefer [mailto:[email protected]] 
Sent: Wednesday, March 18, 2009 3:28 AM
To: NT System Admin Issues
Subject: RE: Expired Encrypting File System cert

 

Does SBS 2003 Premium include its own installation of Microsoft
Certificate Services installed in enterprise mode (i.e. AD integrated)?
If so, then checking that box will result in clients enrolling a new
certificate automatically from Certificate Services.

 

However, if SBS 2003 just does some stuff under the covers to just
generate its own CA cert, and then issue certs signed by this CA cert to
users as part of some SBS 2003 auto-funkiness, then checking that box
will do nothing.

 

Cheers

Ken

 

From: Gavin Wilby [mailto:[email protected]] 
Sent: Tuesday, 17 March 2009 2:22 AM
To: NT System Admin Issues
Subject: Expired Encrypting File System cert

 

Hi All,

Just a  quick question I hope, I dont know if anyone has come across
this one in the past.

The cert that has been assigned to the Encrypting File System in the
default domain policy has expired. This means that all offline file
syncs now fail. I have read up on recreating one, but having never done
it before its all a little daunting, as I dont know the ramifications if
it all goes wrong.

In the GP, at the Public key Policies level, there is an Auto Enrollment
settings field that allows a check box to be put into the "renew expired
certificates,.."

Can I just do this and it will renew the expired cert, or is life just
not that easy?

If you have any tips or guidelines that would be great.

Its a SBS2003 premium server BTW.

Gavin.


 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to