Certification Authority Windows 2003 SBS



Hi
We have had a strange thing happen recently where we have VPN access to
a SBS 2003 domain.

We use Certificates to connect to the Server via VPN.

The Certification Authority has reissued two certificates - one for the
Server that hosts SBS 2003 and one for Microsoft Exchange.

We uncovered this when users were not able to verify the Server when
trying to connect via VPN. An error 778 message was being prompted on
the client end when trying to connect.

So I decided to remove the new certificates seeing that the previous
ones were still valid till 2007.

Users were then able to connect again.

But a few hours later the Certification Authority reissued the Server a
new certificate and the clients were unable to connect again.

My question is why would the CA be reissuing a new certificate for the
Server in the fist place and then again after I delete it? Conisidering
we have not touched any settings on the Server since VPN has been
working fine for over a year now?

Regards
Dominic

.



Relevant Pages

  • RE: VPN Problem, PC not Authenticating with Server
    ... is the VPN server, SBS or router? ... Regarding the configuration of L2TP VPN, please also refer to the following ... 818043 L2TP/IPsec NAT-T update for Windows XP and Windows 2000 ... Computer certificates for L2TP/IPSec VPN connections ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Problem, PC not Authenticating with Server
    ... do you mean you have configured L2TP/IPSec VPN ... is the VPN server, SBS or router? ... 818043 L2TP/IPsec NAT-T update for Windows XP and Windows 2000 ... Computer certificates for L2TP/IPSec VPN connections ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows 2003 VPN wont respond to packets forwarded by Linux router
    ... Win2K3 server? ... Do you have correctly marked external and internal network ... problem is in certificates, use MS CHAP v2 for test, till it works with MS ... > forwarded VPN traffic to a Windows 2000 Pro workstation. ...
    (microsoft.public.windows.server.networking)
  • Re: Demote & remove Exchange from old SBS server that was transitioned to W2k3 & E2k3 standa
    ... I upgraded it from SBS W2k3 to Standard W2k3 using the transition pack ... Now I need to remove Exchange and Demote it-as I want ... If this were a NORMAL server, ... certificates, EFS certificates, Web server certificates. ...
    (microsoft.public.windows.server.sbs)
  • Re: IAS / RRAS
    ... Install Certificate services ... Configure the VPN connectoid and set it for l2tp connections? ... So you may want to try to do without the IAS server until problems ... > are resolved to rule it out as a problem.As far as certificates, ...
    (microsoft.public.windows.server.networking)