So I received an email from my system administrator who wants me to secure a server I own that seems to have a vulnerability in port 443 (which is Windows RPC over HTTPS). Disabling it I know causes some problems with the UI of Windows so I don't want to mess with that. They are saying it is not SSL enabled so it is insecure.
They suggested that I establish an SSL certificate for the service. I don't know where to begin to do this and I couldn't find any articles on this subject.
Any ideas on what I can do here?
EDIT: Sorry it is a Win2003 R2 server. And I believe 443, is the IIS HTTPS service, I don't know how to fix it so the SSL works, apparently, previous users installed a certificate, and it expired--now I don't know what to do.
EDIT2: The previous administrators installed a certificate which promptly expired in 7 days, months ago. I don't believe my site needs certificate, because it is an IP address for a test-site, and I've never heard of anyone spending money to protect an IP address with SSL unless money/personal-info is involved. My question is, is it necessary? And my other question is, why would system administrators flag this as a "server vulnerability that needs to be fixed"--when it is simply a website-access vulnerability that has no relation to gaining server-machine access.