Question : Active Directory Self Signed Certificate in SBS 2008

OK...here goes. I want to start by saying I know next to nothing about CAs and using cetificate services. I just bought a secure remote access box - Aventail EX-750. Problem lies with when our users netowork password expires. If they are in the office, no big deal. If they are out and trying to access the netowrk via the VPN, the Aventail Box won;t let them change their password. The Aventail box DOES allow this but you have to have a secure connection to AD between the Aventail box and your SBS box (domain controller). Question is this - how do I create a self signed active directory SSL certificate with SBS 2008? Would this be the same certificate that the SBS server creates and distributes for OWA - can I just use that one? I know how to get to that one but again, (not knowing anything about certificates) I wasn't sure it the right type of certificate. I found a link from MS that talks about using a tool calld selfssl.exe but it is for IIS version 6.

Anyway, I think you get the idea. Please keep in mind that I am not familiar with this to any degree so any "step by step" instructions would be appreciated. Thanks in advance.

Answer : Active Directory Self Signed Certificate in SBS 2008

The self signed SSL, should to the best of my knowledge work.   The only gotcha is that they may require an SSL from someone they "already trust" in which case you may have to purchase 3rd party cert from GoDaddy, or other source.