locked
RENEW ExpireD Cert on SQL Reporting Service Server RRS feed

  • Question

  • Hi,

    The Internal Certification on the SQL Server Reporting service has expireD and we trying to renew it.

    OS = Windows Server 2008 R2 Standard

    Based on reading, the steps of renewing Cert on SQL reporting server are:

    - Create a new Personal certification.

    - Bind the cert to Reporting Services using Reporting Services Configuration Manager.

    Few questions:

    - Is it necessary to remove the existing expireD cert prior create a new Cert? and

    - The Web Service URL page within RSCM is currently greyed-out: Is it because the existing cert has expired?

    - Is there a way to backup an SSL certificate before deleting it?

    Thank you





    • Edited by Chomet Friday, December 22, 2017 7:05 AM
    Friday, December 22, 2017 2:15 AM

All replies

  • Hi Ray'Weil,

    >>>Is it necessary to remove the existing expireD cert prior create a new Cert

    Yes, it is required to remove the old one in case to apply the new Certificate. 

    >>>The Web Service URL page within RSCM is currently greyed-out: Is it because the existing cert has expired

    Is the Web Service URL still available? if it is not accessible currently due to the expiration of SSL, the unavailability of web service URL may cause the option go grayed out. 

    >>>Is there a way to backup an SSL certificate before deleting it

    To backup the SSL, you may refer to How do I back up and restore SSL certificate and its associated private key in IIS 7?

    Best Regards,

    Henry


    • Edited by Henry Jiang Monday, December 25, 2017 2:54 AM
    Monday, December 25, 2017 2:54 AM
  • Hi Henry, Thanks for the information.

    Me >The Web Service URL page within RSCM is currently greyed-out: Is it because the existing cert has expired

     You >> Is the Web Service URL still available? if it is not accessible currently due to the expiration of SSL, the unavailability of web service URL may cause the option go greyed out. 

       Me >>> The https & http Web Service URLs are all still available. and the expireD cert is still in MMC > Personal Certification store. If we delete the expireD cert from the store, will all the Web Services URLs become Unavailable?

    PS that this SSRS server is not an IIS server. From reading, the certificate renewing process are  different between cert that already expireD vs. cert before expire.

    As the SSL cert has already ExpireD, we need to REQUEST NEW Certificate from Personal Certificate store (and NOT renew cert) - is this correct?

    From there we then generate a CSR then import cert with private key into Personal certificate store > Then Bind the new cert to SSRS?

    Thanks so much for your help.

    Thank you




    • Edited by Chomet Thursday, December 28, 2017 4:06 AM
    Thursday, December 28, 2017 2:19 AM
  • Hi,

    Thank you for your reply. Yes, you need to request the new certificate from the certificate store if the SSL cert has already been expired. 

    Regarding the SSL configuration, you could refer to Configure SSL Connections on a Native Mode Report Server

    Best Regards,

    Henry

    Tuesday, January 2, 2018 5:14 AM
  • Thanks Henry for the confirmation.

    This Microsoft article: Renew a Certificate actually mentioned:

    "The Certificates snap-in enables you to renew a certificate issued from a Windows enterprise certification authority (CA) before or after the end of its validity period by using the Certificate Renewal Wizard.

    You can either renew the certificate with the same key set that you used before, or you can renew a certificate with a new key set."

    When a SSL Certificate EXPIRED on SQL reporting server (not IIS server) > we need to REQUEST for a new cert from Enterprise CA.

    What type of Certificate that this Microsoft article were referring to? where we can RENEW but no REQUEST a new Cert?

    Thank you


    • Edited by Chomet Tuesday, January 23, 2018 7:14 AM
    Thursday, January 4, 2018 2:45 AM