Comments on SeanDaniel.com: Installing a GoDaddy Standard SSL Certificate on S...

Thanks for the post, worked for SBS2011 as well bt...

2012-01-26T14:46:01.287-08:00

Thanks for the post, worked for SBS2011 as well btw.

Ive been battling with certificates for a while fo...

2011-12-13T05:35:48.861-08:00

Ive been battling with certificates for a while for a couple of our customers (installation and configuration) and found a perfect document for resolving certificate errors in outlook (if you are all interested).

http://www.shudnow.net/2007/08/10/outlook-2007-certificate-error/

Hope this helps someone.

PS. If you change your internal domain name, re-run the internet connection wizard to correct any problems and check the IIS binding as there may be 2 entries of your domain in the virtual directory (if the wizard errors out)-known from experience.

Hi Sean, great work on the article. I have an exp...

2011-11-01T16:58:16.439-07:00

Hi Sean, great work on the article.

I have an expired certificate from Go-Daddy. I renewed the certificate and ran into some problems.

Can I just re-key the certificate (using the add trusted certificate wizard and the re-key option in Go-Daddy) and use the remainder of the wizard to complete the process

Todd4Tech, I believe you are right on the money. ...

2011-07-20T14:14:01.930-07:00

Todd4Tech, I believe you are right on the money. no change between SBS and EBS other that what you call out.

I appreciate your post I purchased a Single Domain...

2011-07-18T15:11:51.809-07:00

I appreciate your post I purchased a Single Domain Name Certificate for my EBS setup and thought I would have to turn around and ask for a credit and upgrade to a 5 UCC SSL.

So do you see any reason why I couldn't do the same for my EBS setup as long as I can get my DNS registrar to create a SRV record? Obviously the setup will be a little different.

Also I noticed in a post that I should have the following SANs for everything to work:
mail.contoso.com
contoso.com
contoso.local
autodiscover.contoso.com
Server01.contoso.local
Server01

My main question is not having the local SANs shouldn't be a problem right? It would only be a problem for internal clients trying to access OWA or any other HTTPS website through IE since they will be proxied through Forefront TMG to gain access to them right? Sorry just want to be sure I won't mess stuff up. :)

One issue on the UCC/SAN certificate recommended o...

2011-05-16T08:23:23.863-07:00

One issue on the UCC/SAN certificate recommended or a wildcard certificate is that according to the GoDaddy representative I spoke to, the UCC/SAN certificate does not support a wildcard.

So, before generating your cert request it is critical that you can positively identify the subdomains you need or if you desire to use a wildcard. This will determine which GoDaddy certificate you will order.

Thanks for this , Sharks at http://www.netometer.c...

2011-02-11T03:33:27.603-08:00

Thanks for this , Sharks at http://www.netometer.com/video/tutorials/godaddy-add-trusted-certificate-sbs-2008/step3/index.php wanting to charge for it!

One think to check is the Date and Time is correct on the server

FYI, if you are using RD web on a server that has ...

2011-01-28T05:06:24.738-08:00

FYI, if you are using RD web on a server that has Exhange or SBS you will run into authentication issues between RD Web and Exchange's OWA. Run this powershell command:

Get-OutlookAnywhere | Set-OutlookAnywhere –IISAuthenticationMethods: Basic, ntlm

This will set OWA to use NTLM instead of form based authentication for RPC, RD web has to use NTLM

http://social.technet.microsoft.com/Forums/en/winserverTS/thread/1da9cd90-80f4-4087-9edf-2d9cfa1d312f

http://social.technet.microsoft.com/Forums/en-US/winserverTS/thread/e91af0b9-19af-40e8-87b7-bea127111bc0/

http://social.technet.microsoft.com/Forums/en-US/winserverTS/thread/84ef18d6-ac63-4c83-81c0-0b0f0a0a396c

Not sure what the URL is for the Apps. To get it ...

2011-01-26T14:02:03.648-08:00

Not sure what the URL is for the Apps. To get it to work internally i had to set the RD session host to the tsserver.domain.local. I tried to use the url of the RWW, but that wouldn't work at all

Is your published app URL and your RWW URL the sam...

2011-01-26T11:44:57.442-08:00

Is your published app URL and your RWW URL the same? if not you need to buy a wild card certificate or make them the same

I have a SBS 2011 Srv and a 2008R2 Terminal Server...

2011-01-25T22:53:19.530-08:00

I have a SBS 2011 Srv and a 2008R2 Terminal Server. Go daddy cert was installed and works internally and externally for the remote web access/web workplace.

However, I also have the Remoteapp website installed on the SBS box and users can log in and see the published applications. The issue is when they run the published apps, they get a certificate warning stating the certificate is not from a trusted certifying authority and the certificate name is servername.domainname.local instead of the name on the godaddy cert.

Anyone know how to fix this ... been reading for a few hours and nothing I have tried worked.

Thanks

If you don't get a file, and get an encrypted ...

2011-01-25T16:29:59.099-08:00

If you don't get a file, and get an encrypted string, you can also paste that into the wizard, was that where the confusion was?

Obviously I'm not as smart as I thought I was ...

2011-01-20T20:41:43.849-08:00

Obviously I'm not as smart as I thought I was because I'm having problems following your instructions, or I'm being misled by GoDaddy instructions. Your instructions suggest "Since GoDaddy provided me with a file, I’m going to browse to the file (alternatively ..." but I am not offered a chance to browse for a file - what am I missing?
I'm trying to install a certificate for SBS2008, and GoDaddy instructions refer to using Import-ExchangeCertificate to bring in the .crt file I got when I applied for the certificate. (I downloaded one for IIS5.)
When I try to import the Trusted Certificate for the last step, all I can see is two Self Issued certificates.

What am I doing wrong?
Jerome

Totally still valid for SBS 2011.. enjoy!

2011-01-04T17:52:55.384-08:00

Totally still valid for SBS 2011.. enjoy!

Sean, Is this series of instructions still valid ...

2010-12-26T23:45:49.874-08:00

Sean,

Is this series of instructions still valid for SBS 2011? The wizard looks identical so I am guessing yes. Lastly, in the year since you wrote your article, when downloading the completed cert from GoDaddy, they now offer EXCHANGE as an option in addition to IIS7, IIS6, etc. Should EXCHANGE now be the selected server type over IIS7 when selecting the download?

I figure you know these by heart, so thanks in advance?

That'll do it Lucien... they all use the same ...

2010-10-26T13:28:49.203-07:00

That'll do it Lucien... they all use the same certificate, that's the design of SBS.

Good luck!

I think I found a way to create a SRV record even ...

2010-10-26T11:08:05.351-07:00

I think I found a way to create a SRV record even if my current registrar doesn't allow it: change the DNS of the domain and have it managed by godaddy.

Another thing: Aren't there any other services that need their own certificate (OWA for instance) ? Or do they work with the same url (remote.domain.com) ?

Sean, I am sorry about the miss-information. I th...

2010-10-26T11:05:04.946-07:00

Sean,

I am sorry about the miss-information. I thought Lucien was referring to a multiple name (CN) certificate, meaning that we have installed one certificate that has multiple domain names in that same certificate.

My experience with wildcard certificates is that they are incompatible with Exchange, but work fine for the http. So if the certificates main purpose is for the owa or active-sync functionality, than the wildcard certificate does not work correctly.

@Lucien, The method above doesn't work with a ...

2010-10-26T10:55:01.717-07:00

@Lucien, The method above doesn't work with a single SSL certificate as @JBrubakerjr said. If you cannot create SRV records, you will need either a "Multiple Comon Name (CN) certificate", in which to put the autodiscover.domain.com record in. So the multiple names would be "remote.domain.com" and "Autodiscover.domain.com". Then you would create the autodiscover record as a CNAME to the remote name, and things will work.

The other thing you can do is obtain a wildcard certificate which basically answers for * (or everything) on a domain name. They are more expensive than the single name certificate or multi-name certificate. Once this is installed, then create the autodiscover record again as mentioned above.

Sean

I don't get it, how could you add multiple dom...

2010-10-24T11:26:37.728-07:00

I don't get it, how could you add multiple domain names in a single domain certificate... ?

Yes, this works. We have added multiple domain nam...

2010-10-24T05:13:46.992-07:00

Yes, this works. We have added multiple domain names in the certificate.

Dear Sean, Does your method of using a single doma...

2010-10-23T14:23:15.284-07:00

Dear Sean,
Does your method of using a single domain SSL certificate from godaddy still work fine in case my registrar doesn't allow me to create SRV records ?

It's likely that the certificate you requested...

2010-07-14T14:07:17.521-07:00

It's likely that the certificate you requested from GoDaddy doesn't match the Fully Qualified Domain Name you set up in the Internet Address Management wizard. Did you ensure you requested the exact same name from godaddy?

This post is very help. However, while installin...

2010-07-12T14:51:27.121-07:00

This post is very help.

However, while installing my godaddy certificate, I am stuck on the last step (Add trusted certificate using Trusted certificate Wizard).

The godaddy certificate does not show up in my wizard. Another strange thing is after importing the certificate using MMC, the trust certificate wizard seems to be reset. Instead of giving the option "I have a certificate from my certificate provider", it give the option "I want to buy a certificate from a certificate provider" as if I never submitted a CSR.

Any hints on why this is happening?

You would create an SRV record in your public DNS ...

2009-12-08T12:21:42.168-08:00

You would create an SRV record in your public DNS entry (godaddy for example) that points the autodiscover service to "remote".

The internet address management wizard will do this for you, just select godaddy (if that's where your domain is) and then the domain you want to use. don't bother with the godaddy transfer/purchase website, just type in your godaddy creds and it will work.