SSL certificate requirements for
Microsoft Lync Server
and
Skype for Business

If your enterprise doesn’t already have one, or one designated for use by

BEMS

, you must obtain and install a digital certificate.

Your enterprise can sign its own digital certificates, acting as its own certificate authority (CA), or you can submit a certificate request to a well-known, third-party CA. Although you can preinstall the root authority for your own CA on each user’s device, it makes sense to get an independent CA-validated certificate.

Note
: In the following sections, references to SSL, CA-signed, and personal certificates refer to the digital certificate.

Section:

Prerequisites: Connect for Microsoft Lync Server and Skype for Business

Mutual TLS (MTLS) certificates

Steps to create a CA-signed certificate for the local computer account using a CSR for BEMS

Steps to create a CA-signed for the local computer account using automatic enrollment for BEMS

Create a CSR for the local computer account for BEMS

Create a Personal Certificate for the local computer account for BEMS

Export the CA-signed certificate and private key from the Microsoft Management Console

Import the CA-signed certificate and private key to additional BEMS instances

SSL certificate requirements for Microsoft Lync Server and Skype for Business

SSL certificate requirements for
Microsoft Lync Server
and
Skype for Business