Update Server Certificates

  • Article

To update the certificates for Internet access that are issued by Windows EBS, use the Update Certificates Wizard. Certificates that are issued by Windows EBS typically expire after two years. It is recommended that you update each certificate before its expiration date to ensure that your Security Server and Messaging Server function normally.

The wizard can update the following private Secure Sockets Layer (SSL) certificates:

  • Messaging Server: This certificate is used for SSL connections to Internet Information Services (IIS) Web sites, such as Outlook Web Access.
  • Security Server: This certificate is used by Forefront TMG to publish the Terminal Services Gateway and SSL Web sites in your network.

For more information about SSL certificates in Windows EBS, see the Microsoft Web site (https://go.microsoft.com/fwlink?LinkId=108910).

Note

You cannot use the Update Certificates Wizard to update any certificate that is not issued by Windows EBS.

Important

Updating your certificates briefly interrupts Internet connectivity and client access to Microsoft Exchange through Outlook Web Access. To minimize impact to users on your network, update certificates during a scheduled service maintenance period.

To update certificates

  1. Log on to the Management Server with an account that is a member of the Domain Admins group.

  2. Click Start, point to All Programs, click Windows Essential Business Server, click Tools, and then click Update Certificates. The Update Certificates Wizard appears.

  3. Follow the steps of the wizard to renew the Windows EBS certificate on the Messaging Server, the Security Server, or both servers.