How do I distribute certificates to remote users?

Applies To: Windows Small Business Server 2011 Standard

Self-signed certificates and trusted certificates encrypt traffic on the Internet to help prevent it being read by anyone but the intended recipient. Certificates also help ensure that the Internet traffic goes to the right server. If you configure the server to use a self-signed certificate, a certificate file is stored on the server that is running Windows SBS 2011 Standard. The certificate file and an executable file that install the certificate on the remote computer or remote device are compressed into a certificate distribution package, which is stored in the %systemdrive%:\users\public\public downloads shared folder.

Users download the certificate distribution package onto their computers on the local area network, and then they save the distribution package to removable media, such as a USB drive or a CD. The users take the removable media to the remote computer or remote device, where they install the certificate.

Note

If the server is configured to use a trusted certificate that was purchased from a third party certification authority, users do not need to install the certificate on their remote computers or remote devices.

For information about installing certificates, see the Windows Small Business Server Technical Library at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=121012).

For information about installing a certificate on a remote computer, see “Install the server’s security certificate on a remote computer or remote device” in the “Windows Small Business Server Information Worker’s Guide” at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=117657).