Exchange 2003 renew OWA certificate permissions error

We need to renew our web server certificate (used for OWA only) which was self-issued on a domain CA. The exchange server is also a domain controller so we get permission to renew or reissue denied due to insufficient permissions, possibly because here is no local administrator account. Any ideas would be appreciated.