Networknet.nl

Thanks to guys from Telnetport25 I was able to finish my SSL certificate migration for my new Windows Server 2008 virtual machine running a Exchange 2007 SP1 installation.

My work log:

• Logon on the old Windows Server 2003 hosting the OWA front-end role
• Start MMC and add the Certificate Snap-In; choose the Computer Account.
• Go to Personal/Certificates and locate the SSL certificate assigned to IIS for SSL encryption. Right click ; All Tasks and choose export. Choose the appropriate options like the certificate path; assign password and save the PFX file to "My Documents"
• Copy the PFX file to your Windows Server 2008 Client Access Server
• Logon on the Windows Server 2008 and add the Certificate Snap-In to a new MMC console for the Computer Account
• Go to Personal/Certificates; right click; All Tasks and choose Import.

• Locate the PFX file; enter the password and make sure you check "Mark this key as exportable" to enable future migrations of the SSL certificate.
• Place the certificate in the Personal Store

• Open the certificate and go to Details tab. Locate the Thumprint field and select Value with mouse; press CRTL-C to copy the data.

• Paste the value in Notepad and replace the "SPACE’ with CRTL-H. In the Find what field press space on the keyboard and click Replace All

• Copy the Thumbprint
• Start the Exchange Management Shell and run the Enable-ExchangeCertificate cmdlet
• Type IIS as Services and paste the copied data from Notepad to Thumbprint

• Start Exchange Management Console and go to Server Configuration /  Client Access / Select the server and open owa from Outlook Web Access tab
• Type External URL of the SSL certificate and DNS. E.g. https://webmail.domain.tlk

• Click OK and you are finished to test the configuration.
• Start IE and test your OWA role. Review your NAT and Firewall rules also.

Related links:

• Enable-ExchangeCertificate
• Exporting Existing SSL OWA Certificates from Exchange 2003 FES to Exchange 2007 SP1 CAS on Windows 2008…

Go to http://www.microsoft.com/downloads/details.aspx?familyid=d09c1d60-a13c-4479-9b91-9e8b9d835cdc&displaylang=en and download the Microsoft SQL Server Native Client & Microsoft SQL Server 2005 Command Line Query Utility packages. Install these two msi files on the WSUS server.

Start CMD command shell and start the sqlcmd with the following options.

sqlcmd -S \\.\pipe\mssql$microsoft##ssee\sql\query -E

Now you are connected to the Windows Internal Database based on SQL Server 2005 edition which is used by WSUS 3 and some other included Windows Components like Windows Share Point Services 3.0.

To backup the database copy or type the sql command below. Change DISK option to a local folder of the server.

1> BACKUP DATABASE [SUSDB] TO DISK = N’G:\WSUS\UpdateServicesDbFiles\SUSDB.BAK’ WITH NOFORMAT, INIT, NAME = N’WSUS Database Backup’, SKIP,NOREWIND, NOUNLOAD, STATS = 10

2> Go