Windows Server - RWW on a SBS 2008

Asked By storlogic

06-Feb-10 03:24 PM

Ok, I am going to try and explain this the best I can...

1.  I have verified that the local certificate is installed correctly on the
server
2.  I have installed the certificate from the above server and have verified
that it is correct
3.  When in the office I can type in "remote.domain.com/remote" and
everything works great
4.  When home, however, I keep getting "This CA Root certificate is not
trusted because it is not in the Trusted Root Certification Authorities
store."
5.  The user I am using is apart of the Remote User group as well as the SBS
RWW group
6.  The user I am using is also part of the Administrators group
7.  I have opened all of the ports on my firewall (80, 3389, 987 and 443)
8.  I can successfully connect to the server via RDC

I am absolutely stumped.  PLEASE help!

06-Feb-10 03:50 PM

Please try to install the certificate on your client machine and put it in
Trusted Root Certificates store. To verify certificates in that store you can
use followinf procedure:
In IE, Go Tools | Internet Options | Content | Certificates | Reusted Root
Certificates
you can use that window also to import the certificate there

With kind regards
Krystian Zieja
http://www.projectenvision.com

06-Feb-10 05:04 PM

In My Opinion it is easiest with SBS2008 to just buy the $30 a year for 3 or
more years cert
from GoDaddy and install it.

Much less headaches in the long run...
Especially with RWW and other issues.
(SBS2003 it was easy to get away with The SBS Self Signed Cert.)

Instructions for installing the GoDaddy cert is here
http://sbs.seandaniel.com/2009/02/installing-godaddy-standard-ssl.html

Russ

--
Russell Grover - SBITS.Biz [SBS-MVP]
Microsoft Gold Certified Partner
Microsoft Certified Small Business Specialist
24hr SBS Remote Support - www.SBITS.Biz
Question or Second Opinion $25.00 - www.PersonalITConsultant.com
Free Trial Microsoft Online Services - www.Microsoft-Online-Services.com

06-Feb-10 05:25 PM

I completely agree with you, however in my opinion it is always good to know
why we have exceptions and how to resolve them :).  Sometimes it can come
handy.

With kind regards
Krystian Zieja
http://www.projectenvision.com

06-Feb-10 05:34 PM

I am not saying what you said is wrong. by far you are correct
it is just the pain vs the $30/year of a third party cert. IMO it is not worth
it.
Especially trying to explain this with some remote users ;)
if you know what I mean :)
Russ

--
Russell Grover - SBITS.Biz [SBS-MVP]
Microsoft Gold Certified Partner
Microsoft Certified Small Business Specialist
24hr SBS Remote Support - www.SBITS.Biz
Question or Second Opinion $25.00 - www.PersonalITConsultant.com
Free Trial Microsoft Online Services - www.Microsoft-Online-Services.com

06-Feb-10 05:53 PM

Buy a third party godaddy cert.  It will make your life soooooo much
easier than this.

What OS are you using at home?

If Vista/Win7 you need to run as admin the first time to get that cert
installed/also make sure that you have installed the cert bundle AT HOME.

07-Feb-10 10:46 AM

I agree, third party makes it easier. But if you are going to use local cert,
RUN THE INSTALLER EXE! If you do not, it will not work. If you do, it will.

--
Charlie.
http://msmvps.com/blogs/russel

07-Feb-10 01:50 PM

To elaborate on what Charlie and Susan offered, SBS 2008 has changed from
previous version so SBS in that the "local" certificate is generated from a
CA instead of being a stand-alone.  So just copying the certificate and
installing it *will not* work.  Use the installer that comes with SBS 2008 to
install the entire CA root and you will see the problem resolve.

-Cliff

07-Feb-10 06:57 PM

OK, I will definately consider a 3rd party Cert.

However, now when I type in my https://remote.domain.com/remote I get
Connection Problems".

This is after I have run the "Install" of the certificate from the server.

I am running Windows 7 (ie 8), but this is also not working on my XP Pro
laptop either (also using ie 8).

Thoughts?