

Only non-domain workstations need additional action performed in order to trust a self-signed certificate in use by the SBS server, namely using the provided certificate install package to configure the non-domain machine to add the certificate to its Trusted Root Certificates store.End of support for Windows Server 2008 R2 has been slated by Microsoft for January 14th 2020.

Therefore, they should all trust the certificate installed by the SBS Console. click Finish when done.īased on your comment, all of the machines using RDP on the server are domain-joined.

You should never install the certificates in these services manually on an SBS server. It correctly (re-)installs the existing certificate in the various services on the server that use the certificate, such as Exchange, Remote Web Access, Remote Desktop Session Broker, etc.If you're using a self-signed certificate that's expired, it renews it.The correct way to renew or add certificates (whether self-signed or signed by a public CA) in Windows Small Business Server is to use the Windows SBS Console's "Fix my network" wizard.
