Hello,
one of our customers currently running SBS 2011 has the default self-signed SSL certificate valid for 2 years configured during the installation of Windows SBS 2011 which is about to expire within the next 2 days.
Based on my understanding, in order to obtain a new matching cert if the default self-signed certificate has expired we have to run the "Fix My Network" wizard from the Connectivity tab. This wizard should automatically issue a new matching cert.
Two years ago, as part of the initial Windows SBS 2011 deployment, we managed to manually distribute the certificate distribution package on various devices including computers that were not joined to the Windows SBS 2011 domain, smartphones and tablets.
Here come the questions:
===============================================
1) The certificate that is about to expire within the next 2 days is the default self-signed SSL certificate valid for 2 years configured during the installation of Windows SBS 2011, while the root certificate we manually distributed on computers that were not joined to the Windows SBS 2011 domain, smartphones and tablets using the certificate distribution package is valid for 5 years until June 2016. After running the "Fix My Network" wizard from the Connectivity tab to issue a new matching cert that will replace the expired 2-year leaf certificate will we need to manually redistribute the root certificate again using one of the available redistribution methods ?
2) In order for the "Fix My Network" wizard to be effective is it necessary to run itafter the 2-year leaf certificate configured during the installation of Windows SBS 2011 has already expired or is it possible to run it at a certain timebefore the 2-year leaf certificate expires, thus before the users’ Outlook clients, smartphones and tablets start reporting that the server security certificate had expired ?
===============================================
I would really appreciate if someone could kindly share some thoughts.
Thank you in advance for your support.
Massimiliano