Monthly Archive: March 2013

Mar 25 2013

Renew Exchange 2010 Self Signed Certificate with GoDaddy Standard UCC SSL Certificate

In this article I will show you how to renew Exchange 2010 Self Signed Certificate.  I normally use GoDaddy’s Standard UCC SSL Certificates as they are very cost affective. This process can sometimes be a very time consuming job as you will typically do this once a year or even more, then each time you have to figure it out from scratch again.

There are 4 parts that you need to do:


  1. Create a New Exchange 2010 Certificate request
  2. Renew/buy and setup your GoDaddy UCC SLL Certificate
  3. Complete the Exchange 2010 Pending Certificate request
  4. Assign the Exchange 2010 Services to the Certificate

Create a New Exchange 2010 Certificate request



Click on NEW EXCHANGE CERTIFICATE in the action bar on the right-hand side.

When the NEW EXCHANGE CERTIFICATE windows opens, type in a description of your certificate. (This can be anything, as this is only to identify the certificate if you have more than one)

Exchange 2010 New Exchange Certificate


















Then click NEXT

On the next windows, if you use a wildcard certificate, tick the ENABLE WILDCARD CERTIFICATE and type in your wildcard domain name (e.g. *.yourdomian). Mostly you will leave this blank for a single site and domain.

Exchange 2010 Domain Scope


















Click NEXT

Now you need to configure the services that this certificate will be used for. Use the drop down arrows to select the services that will be used, e.g. Outlook Web App, Exchange ActiveSync and POP/SMTP). Also make sure that domain names are the primary one you used/will be using in your certificate for example

Exchange 2010 Exchange Configuration


















Click NEXT

The next window will ask to review your certificate domains. Make sure you have your primary domain name for the certificate and the domain name added to the list. Make sure your primary domain name is SET AS COMMON NAME.

Example: (Common Name)

Exchange 2010 Certificate Domains


















Click NEXT

The next window asks for the Organization details and Location details. Complete all the details as requested.

Right at the bottom, click on BROWSE and select a folder and file name for your Exchange Certificate Request. (The file name can be anything as long as you know what it is.)

Exchange 2010 Organization Location


















Click NEXT

A configuration summary will be shown. Check that everything is correct.

Exchange 2010 Certificate Configuration


















Click NEXT

Exchange 2010 will then create the Certificate Request and also the Certificate Request File.

Exchange 2010 Completion Summary



















Under EXCHANGE CERTIFICATES you will you will see a new Certificate Name added to the list and the SELF SIGNED column will show as TRUE.

Exchange Management Console Exchange Certificates





Now we need to go do GoDaddy, which is your certificate authority to create the certificate.


Renew/buy and setup your GoDaddy UCC SLL Certificate

These images are taken from the renewal process in Godaddy, but if you buy a new certificate, the process will be very similar.

First you will pay for the next period your certificate will be active, e.g. 1 year or 3 year or whatever you can afford at the moment. (I normally do this on a yearly basis)

During the payment process you will be asked to configure your certificate.

On the first screen (HOSTING), select THIRD PARTY, OR DEDICATED SERVER.

Then tick the box next to USE PREVIOUS CSR.

GoDaddy SSL certificate renewal













Go to your Certificate Request File that you just saved from the Exchange 2010 Server and open it with NOTEPAD. Copy and Paste everything in the file to the box where it states that you need to ENTER YOUR CERTIFICATE SIGNING REQUEST (CSR)

It should look something similar to this:



When that is done, make sure your SUBJECT ALT NAMES is correct.

I normally use the following: (Primary domain name) (Sub alt name) (Sub alt name)

servername (Sub alt name)

servername.yourlocaldomain.local (sub alt name)


Click NEXT

On the next window, confirm all your settings and click NEXT.

GoDaddy SSL certificate renewal










The next window will show that your certificate will be issued shortly. Click FINISHED.

GoDaddy SSL certificate renewal










Launch the SECURE CERTIFICATE SERVICE from your control panel in GoDaddy.

You will see that there is a PENDING REQUEST. GoDaddy will send an email to the domain administrator and account holder of the GoDaddy Account to verify that the Certificate is correctly acquired by you, the domain owner/administrator. Click on the link in the email to verify. Shortly after that the new certificate will appear under the CERTIFICATES folder in the SECURE CERTIFICATE SERVICE.

GoDaddy SSL certificate renewal





GoDaddy SSL certificate renewal












Select the certificate and click on the DOWNLOAD option above it. In the Download Certificate windows, select EXCHANGE 2010 from the drop down and click DOWNLOAD. A ZIP file will be downloaded to your server. Extract the ZIP file and save the certificates on your server.

Renew Exchange 2010 Self Signed Certificate pending request


Right-click on the new certificate request you created and select COMPLETE PENDING REQUEST.

Click BROWSE and browse to the folder where you saved the content of the ZIP file.

Change the file type to *.*

From the two files that was in the ZIP file, select the .cer file and click COMPLETE

When the process is done, you will notice that your new certificate will show as SELF SIGNED = FALSE.

Assign the Exchange 2010 Services to the Certificate

Right-click on your new certificate again and select ASSIGN SERVICES TO CERTIFICATE.

On the window that opens, you need to add your EXCHANGE 2010 servers. (In my case there were only one server)

Exchange 2010 Assign Services to Certificate


















Click NEXT

Then select all the services that your certificate will be used for.

Exchange 2010 Assign Services to Certificate Select Services


















Click NEXT

Make sure your configuration summary is correct and click ASSIGN.

Exchange 2010 Assign Services to Certificate Summary


















You have just completed the process of renewing your GoDaddy UCC SSL Certificate on an EXCHANGE 2010 SERVER.

Make sure that the expiry date is correct and that it shows a blue correction mark next to your certificate. Everything should be good to go!

Mar 20 2013

Acrobat failed to load its Core DLL – Open with Protected Mode

Had an interesting problem today. After upgrading a Windows 7 PC from Adobe Reader 9.5 to Adobe Reader XI, I received a message when I open Adobe Reader that Adobe Reader cannot open in Protected Mode due to an incompatibility with your system configuration and that Acrobat failed to load its Core DLL file.

Adobe Reader Protected Mode
















When you select the option “Open with Protected Mode disabled” I receive an error “Acrobat failed to load its Core DLL

Acrobat failed to load its core dll







I’ve tried the following:

–          Uninstall Adobe Reader XI and reinstall it. I got the same error.

–          Remove the folder C:\Program Files(x86)\Adobe and reinstall. Got the same error.

–          Log in with a different profile and reinstall. Got the same error.

–          When I reboot the PC I got an error saying

The application was unable to start correctly (0xc000007b)“.

Application unable to start correctly Adobe error








I eventually uninstalled Adobe Reader XI and download and install Adobe Reader 9.5. This solved the problem and I could open Adobe Reader. After that I updated it again to Adobe Reader XI and everything worked fine.

My only conclusion was that something went wrong or the installation were corrupt after the first upgrade that I’ve done and caused the Acrobat failed to load its Core DLL error.

If you need to download previous versions of Adobe Reader, click here.

Mar 16 2013

Sqlservr.exe high memory usage on SBS2008

You will sometimes find that your Windows Small Business Server 2008 will become slow and even sometimes reboot or hang. This can be caused by SQL Server that plays an important part in reporting and other functions on the SBS2008 server and that the Sqlservr.exe high memory usage will cause slow and unresponsive functions.

If you look in the Task Manager you will see that the Sqlservr.exe process will accumulate memory as long as there are still memory available. This is because by default there is no limit on the amount of memory that SQL Server is allowed to use.

I will show you how to change this. These settings will not have any effect on the reporting services and other software that is using SQL Server. It might speed up your SBS2008 and also might resolve your server rebooting or hanging from time to time.

Here is how to change your SQL Server memory usage limit to 512kb. I normally change this to either 512kb or 1024mb depending on the amount of memory your server has installed.

–          Open an COMMAND PROMPT (Make sure you have full Administrator rights)

–          Type: osql -E -S \\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query

–          At the SQL Prompt type the following:

1> sp_configure ‘show advanced options’,1
2> reconfigure with override
3> go

–          The following message will be displayed:

Configuration option ‘show advanced options’ changed from 0 to 1. Run the RECONFIGURE statement to install.

–          Then type the following:

1> sp_configure ‘max server memory’, 512
2> go

–          The following message will be displayed:

Configuration option ‘max server memory (MB)’ changed from 2147483647 to 512. Run the RECONFIGURE statement to install.

–          Then type:

1>  exit

Reboot the SBS2008 server and your Sqlservr.exe will be more stable and the high memory usage problem will be resolved.

Mar 15 2013

How to fix 80072EFD Error on Windows Small Business Server 2008

I recently had a Windows Small Business Server 2008 (SBS2008) that for some reason just don’t want to install any updates. When you run Windows Updates it will show “Windows can’t connect to update…” error 80072efd. I will show you how to fix 80072EFD error on Windows Small Business Server 2008

After further investigation I found that the Windows Server Update Services or WSUS was disabled and not working. This was done probably to save disk space as Windows Server Update Services store all the Windows Updates locally on the server. This caused the AUTHORITY\NETWORK SEVICE entry in the registry to be 0 instead of 1.

Because of this meltdown of WSUS that uses http://servername:8530 to communicate with Windows Update Server locally. If the server can’t find that address or any updates it will respond with the 80072efd error.

After doing some research I found a workaround for this. I uninstalled WSUS and edited the Windows Update entry in the registry.

How to fix 80072EFD error on Windows Small Business Server:

–          Click START -> RUN and type REGEDIT and press ENTER

–          Navigate to HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate

–          In the folder, look for the following keys:



(if these keys are in your WindowsUpdate folder, SBS2008 is trying to updates locally on the server.)

–          Delete the “WindowsUpdate” key from the registry.

(Always remember to export the folder first before you delete it, just for safety)

–          Restart the Windows Update Service

(Go to START -> RUN -> type “service.msc” and stop and start the service.)

This instantly solved my problem and I was able to install all Windows Updates via Automatic Updates.

Hope this will work for you too.