Some Background:

I was changing the Network Rules in ISA 2004 to try and resolve a routing problem caused by trying to implement a Web Screening service (from Messagelabs). Things were not working out, I could not get Direct Push from Exchange to work through this Proxy Service, I decided to remove the plug ins rule changes etc....., I disabled the extra rules and Web Chaining, and deleted my additional network then applied the changes, at this point it all went horribly wrong ISA had a fit and decided that it could not see any Network definitions at all. When I tried to view them through ISA Server MGR it gave me 0x8007.... something cannot find file. I could not re-import the configuration either it gave me the same error.

 

After a lot of poking about in the registry, Internet research and looking at ISA I concluded that it was necessary to completely uninstall ISA and start again. I did so applied SP3 and re-imported my ISA configuration which I had taken the precaution of saving before I started all my previous changes, and I was back to working again. During this reinstall process however it reran the CEICW, this recreated the default certificate (this may have been a mistake on my part letting it run but that's what I did).

 

The new problem:

All my users were working again. However my mobile phones could no longer SYNC they give me code 0x80072F0D which tells me that the server certificate is not valid. I went back and checked my Web Listener rules and sure enough they were pointing to my default certificate, so of course the mobile phones could no longer see a 'Valid' SSL Certificate. (These phones BTW will not allow me to import my own SSL Cert so this is the only way to get them to work)

 

I created a new web Listener and attempted to set this looking at my valid 'SSL (InstantSSL) certificate'. I cant see it. Therefore I went back to IIS checked the default website and tried to find it. Its not Listed the when using the Service Certificate/Replace option. Using the MMC plug in I looked at the Certificate Store, and reimported the Trusted Root & Intermediate Certificates. I the deleted and reimported my (newish) Shiny SSL certificate into Personal (Computer Account). In the MMC console It all looked fine, rebooted etc...., I can now see the Certificate in the Server/Cert-Replace dialogue (which I did not complete I just used it to see what was 'available')

 

However I still cannot see the InstantSSL certificate from ISA.

 

I have tried 'cheating' two ways:

1) Set up a new dummy website and generate a New Request

2) Creating a new request on the default Site

 

Then using my previously generated certificate as the 'new import' This doesn't work either.

...

 

I had a lot of problems getting this to work before the first time around November 2007, I recall making to requests as I was then in the 30day Rekey period. Its also possible I may have missed writing down a step somewhere. The general consensus seems to be: SBS is anecdotally very picky about SSL certs, and unless you do it the 'proper' way using the supplied wizards it wont work.

 

I have a feeling that what I need to do is completely start again generate an entirely new request and pay for a New SSL certificate.

 

Any thoughts or ideas would be greatly appreciated.

 

Thanks

Paul