SBS 2008 removing self Signed SSL Certificate

Hi,
I am doing a SBS migration from 2003 -> 2008, and I accidently went through
the wizard in the console to add a certificate and added the auto-generated
self-signed certificate.
I went out to Godaddy and purchased one, and installed it. In the wizard
the only certificate that shows up, even though I imported the one from
Godaddy is the self signed one.
Anyone have any ideal how I remove the self signed one, and get the Godaddy
one to show up for use?

Thanks,
Mike

If the certificate is *gone* then it is possible (and I'd argue likely) that
the certificate's private key has been removed from the store. Even if you
could track down the original godaddy cert emails, etc, that'd only be the
public key.

I'd recommend re-running the wizard and creating the certificate request
again. Go to GoDaddy and choose the option to "rekey" the certificate. This
is free since the subject name is not changing. Then complete the wizard as
normal. All will be restored to former working condition.

--
Cliff Galiher
Microsoft has opened the Small Business Server forum on Technet! Check it
out!
http://social.technet.microsoft.com/...server/threads
Addicted to newsgroups? Read about the NNTP Bridge for MS Forums.

"Mike" <> wrote in message
news:E7F6E476-7CB9-4FB1-9C31-...
> Hi,
> I am doing a SBS migration from 2003 -> 2008, and I accidently went
> through
> the wizard in the console to add a certificate and added the
> auto-generated
> self-signed certificate.
> I went out to Godaddy and purchased one, and installed it. In the wizard
> the only certificate that shows up, even though I imported the one from
> Godaddy is the self signed one.
> Anyone have any ideal how I remove the self signed one, and get the
> Godaddy
> one to show up for use?
>
> Thanks,
> Mike
>

Cliff,
What you are saying for my new certificate makes sense. Does rerunning the
wizard delete the one that was self signed? Also, perhaps part of the
problem I am having is that the self signed one created at remote.domain.com,
and the one i bought from Godaddy had the same name. Not sure if that makes
a difference or not.
Ideally I want to clean up any mess that I created originally so the new
cert is the only/appropriate one.
Thanks for the reply.

Mike


"Cliff Galiher - MVP" wrote:

> If the certificate is *gone* then it is possible (and I'd argue likely) that
> the certificate's private key has been removed from the store. Even if you
> could track down the original godaddy cert emails, etc, that'd only be the
> public key.
>
> I'd recommend re-running the wizard and creating the certificate request
> again. Go to GoDaddy and choose the option to "rekey" the certificate. This
> is free since the subject name is not changing. Then complete the wizard as
> normal. All will be restored to former working condition.
>
> --
> Cliff Galiher
> Microsoft has opened the Small Business Server forum on Technet! Check it
> out!
> http://social.technet.microsoft.com/...server/threads
> Addicted to newsgroups? Read about the NNTP Bridge for MS Forums.
>
> "Mike" <> wrote in message
> news:E7F6E476-7CB9-4FB1-9C31-...
> > Hi,
> > I am doing a SBS migration from 2003 -> 2008, and I accidently went
> > through
> > the wizard in the console to add a certificate and added the
> > auto-generated
> > self-signed certificate.
> > I went out to Godaddy and purchased one, and installed it. In the wizard
> > the only certificate that shows up, even though I imported the one from
> > Godaddy is the self signed one.
> > Anyone have any ideal how I remove the self signed one, and get the
> > Godaddy
> > one to show up for use?
> >
> > Thanks,
> > Mike
> >

The cert is likely still there, you'd just have to re assign it to each IIS
site.
(Since you may not know how to do this.)

Like Cliff suggests
I'd suggest just have a new cert re issued from Godaddy
(Again no cost)
and install it again.

To me that would probably be the easiest for you.
Russ

--
Russell Grover - SBITS.Biz [SBS-MVP]
MCP, MCPS, MCNPS, SBSC
Remote Small Business Server/Computer Support - www.SBITS.Biz
BPOS - Microsoft Online Services - www.BPOSMadeEasy.com


"Mike" <> wrote in message
news:440AB1EF-665F-4B6B-BE89-...
> Cliff,
> What you are saying for my new certificate makes sense. Does rerunning
> the
> wizard delete the one that was self signed? Also, perhaps part of the
> problem I am having is that the self signed one created at
> remote.domain.com,
> and the one i bought from Godaddy had the same name. Not sure if that
> makes
> a difference or not.
> Ideally I want to clean up any mess that I created originally so the new
> cert is the only/appropriate one.
> Thanks for the reply.
>
> Mike
>
>
> "Cliff Galiher - MVP" wrote:
>
>> If the certificate is *gone* then it is possible (and I'd argue likely)
>> that
>> the certificate's private key has been removed from the store. Even if
>> you
>> could track down the original godaddy cert emails, etc, that'd only be
>> the
>> public key.
>>
>> I'd recommend re-running the wizard and creating the certificate request
>> again. Go to GoDaddy and choose the option to "rekey" the certificate.
>> This
>> is free since the subject name is not changing. Then complete the wizard
>> as
>> normal. All will be restored to former working condition.
>>
>> --
>> Cliff Galiher
>> Microsoft has opened the Small Business Server forum on Technet! Check
>> it
>> out!
>> http://social.technet.microsoft.com/...server/threads
>> Addicted to newsgroups? Read about the NNTP Bridge for MS Forums.
>>
>> "Mike" <> wrote in message
>> news:E7F6E476-7CB9-4FB1-9C31-...
>> > Hi,
>> > I am doing a SBS migration from 2003 -> 2008, and I accidently went
>> > through
>> > the wizard in the console to add a certificate and added the
>> > auto-generated
>> > self-signed certificate.
>> > I went out to Godaddy and purchased one, and installed it. In the
>> > wizard
>> > the only certificate that shows up, even though I imported the one from
>> > Godaddy is the self signed one.
>> > Anyone have any ideal how I remove the self signed one, and get the
>> > Godaddy
>> > one to show up for use?
>> >
>> > Thanks,
>> > Mike
>> >

Russ,

Yeah, I "think" I know how to do it, but if running the wizards fixes it,
installs the Godaddy cert and deactivates/removes the self signed one, I'm
good with that. Thanks so much!

Mike


"Russ (SBITS.Biz) [SBS-MVP]" wrote:

> The cert is likely still there, you'd just have to re assign it to each IIS
> site.
> (Since you may not know how to do this.)
>
> Like Cliff suggests
> I'd suggest just have a new cert re issued from Godaddy
> (Again no cost)
> and install it again.
>
> To me that would probably be the easiest for you.
> Russ
>
> --
> Russell Grover - SBITS.Biz [SBS-MVP]
> MCP, MCPS, MCNPS, SBSC
> Remote Small Business Server/Computer Support - www.SBITS.Biz
> BPOS - Microsoft Online Services - www.BPOSMadeEasy.com
>
>
> "Mike" <> wrote in message
> news:440AB1EF-665F-4B6B-BE89-...
> > Cliff,
> > What you are saying for my new certificate makes sense. Does rerunning
> > the
> > wizard delete the one that was self signed? Also, perhaps part of the
> > problem I am having is that the self signed one created at
> > remote.domain.com,
> > and the one i bought from Godaddy had the same name. Not sure if that
> > makes
> > a difference or not.
> > Ideally I want to clean up any mess that I created originally so the new
> > cert is the only/appropriate one.
> > Thanks for the reply.
> >
> > Mike
> >
> >
> > "Cliff Galiher - MVP" wrote:
> >
> >> If the certificate is *gone* then it is possible (and I'd argue likely)
> >> that
> >> the certificate's private key has been removed from the store. Even if
> >> you
> >> could track down the original godaddy cert emails, etc, that'd only be
> >> the
> >> public key.
> >>
> >> I'd recommend re-running the wizard and creating the certificate request
> >> again. Go to GoDaddy and choose the option to "rekey" the certificate.
> >> This
> >> is free since the subject name is not changing. Then complete the wizard
> >> as
> >> normal. All will be restored to former working condition.
> >>
> >> --
> >> Cliff Galiher
> >> Microsoft has opened the Small Business Server forum on Technet! Check
> >> it
> >> out!
> >> http://social.technet.microsoft.com/...server/threads
> >> Addicted to newsgroups? Read about the NNTP Bridge for MS Forums.
> >>
> >> "Mike" <> wrote in message
> >> news:E7F6E476-7CB9-4FB1-9C31-...
> >> > Hi,
> >> > I am doing a SBS migration from 2003 -> 2008, and I accidently went
> >> > through
> >> > the wizard in the console to add a certificate and added the
> >> > auto-generated
> >> > self-signed certificate.
> >> > I went out to Godaddy and purchased one, and installed it. In the
> >> > wizard
> >> > the only certificate that shows up, even though I imported the one from
> >> > Godaddy is the self signed one.
> >> > Anyone have any ideal how I remove the self signed one, and get the
> >> > Godaddy
> >> > one to show up for use?
> >> >
> >> > Thanks,
> >> > Mike
> >> >

Cliff and Russ,

Thanks for your help yesterday. I reran the wizard on the SBS 2008 server,
regenerated the CSR, went to Godaddy and did the rekey, followed Sean Daniels
instructions on how to successfully import it, and it all completed
successfully. I guess I will know for sure when I complete my migration
(hopefully today).

Mike

"Mike" wrote:

> Hi,
> I am doing a SBS migration from 2003 -> 2008, and I accidently went through
> the wizard in the console to add a certificate and added the auto-generated
> self-signed certificate.
> I went out to Godaddy and purchased one, and installed it. In the wizard
> the only certificate that shows up, even though I imported the one from
> Godaddy is the self signed one.
> Anyone have any ideal how I remove the self signed one, and get the Godaddy
> one to show up for use?
>
> Thanks,
> Mike
>

Hi guys,

I just went in and looked at the SBS 2008 console, and brought up the add
certificate wizard. It shows me that I have 3 installed, the self-signed
one, and it lists the one I got from Godaddy twice. Am I good, or do I need
to somehow delete the self-signed one and one of the Godaddy ones. Should I
only see one listed, or does it matter? If so, how do I delete them?

Thanks for all your help.

Mike


"Mike" wrote:

> Cliff and Russ,
>
> Thanks for your help yesterday. I reran the wizard on the SBS 2008 server,
> regenerated the CSR, went to Godaddy and did the rekey, followed Sean Daniels
> instructions on how to successfully import it, and it all completed
> successfully. I guess I will know for sure when I complete my migration
> (hopefully today).
>
> Mike
>
> "Mike" wrote:
>
> > Hi,
> > I am doing a SBS migration from 2003 -> 2008, and I accidently went through
> > the wizard in the console to add a certificate and added the auto-generated
> > self-signed certificate.
> > I went out to Godaddy and purchased one, and installed it. In the wizard
> > the only certificate that shows up, even though I imported the one from
> > Godaddy is the self signed one.
> > Anyone have any ideal how I remove the self signed one, and get the Godaddy
> > one to show up for use?
> >
> > Thanks,
> > Mike
> >