
Verify the Terminal Services Gateway certificate settings. When prompted to overwrite the existing services, answerĨ.

Copy the certificate thumbprint from step 6 and run the commandĮnable-ExchangeCertificate -Thumbprint -Services "POP, IMAP, IIS, SMTP"

Verify the thumbprint value from Exchange Management Shell against the properties of the actual certificate.ħ. The newly installed certificate should have no services assigned to it. Obtain the thumbprint of the newly installed certificate by opening an elevated Exchange Management Shell prompt and typing the command To verify that the certificate is correct based on the Subject Alternative Name field, issuer, etc.Ħ. Select your certificate from the drop-down list under Log on to the SBS server as an administrator and launch the Internet Services Manager (IIS Manager) console.Ĥ. Use these steps to assign the certificate:ġ. This will assign a self-signed certificate temporarily, but also makes other important configuration changes.

If the name does not match, first run the Internet Address Management Wizard ( The instructions below assume that the certificate Subject Alternative Name matches the Internet Domain Name on the Network\Connectivity tab of the Windows SBS Console. To use the certificate, you will need to manually assign it to the web site in IIS. In the example screenshots below, the external URL being published is. The behavior that you will see is that the certificate will be correctly installed in the computer’s personal certificate store, but will not show up in the Add a Trusted Certificate Wizard. This article documents how to manually install these types of certificates. The Subject Alternative Name field is used to designate the fully qualified domain name (FQDN) of the certificate instead. This happens because some third-party certificate authorities (CAs) issue certificates with a blank subject. The SBS Add a Trusted Certificate wizard may fail to display a certificate that is correctly installed in the certificate store if the subject field of the certificate is missing. Today’s post comes to us courtesy of Mark Stanfill First published on TechNet on Dec 14, 2009
