Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to use certificates to authenticate both client and server for a new internal service.

Since all our servers already have the SBS (2011 Standard) server's Cert installed as a Trusted Root, getting it to issue the new certificates seems like the right way to go.

All the documentation seems to indicate I should browse to SbsServer/certsrv but there's nothing at that address. I've tried adding all the Role Services through the ferature manager that seem like they may be relevant, but still nothing.

Do I need to use the web front-end to issue certificates? If so, how can I enable it? If not, is there a wizard I can use?

share|improve this question
What specific version of SBS? The low-end one (essentials?) won't, period. – HopelessN00b Aug 1 '12 at 1:22
@HopelessN00b My apologies, I should've mentioned. It's "SBS 2011 Standard. Initially a trial installation then upgraded to Partner Network license. – Basic Aug 1 '12 at 2:25
up vote 2 down vote accepted

/certsrv is one of a few ways you can manually request certificates from a client. It's kind of the legacy way in Vista and newer. If you wanted to manually request a computer certificate on Vista/Win7:

  • Open a MMC
  • Add Certificates snap-in for Computer
  • Under Personal/Certificates, r-click and choose Request New Certificate
  • You should see a policy in the wizard you can use and should then see Computer certificate

The best way is to do it automatically through GPO. For computer certificate auto enroll:

  • Edit the Default Domain Policy (GPO)
  • Under Windows Settings > Security Settings > Public Key Policies
  • Open Certificate Services Client - Auto-Enrollment Properties and enable it, and check both boxes

On server you should have one or more MMC consoles for Certificate Services management, not sure if SBS2011 pulls those into it's mgmt GUI or not.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.