SSL certificate requirements for
Skype for Business

If your enterprise doesn’t already have one, or one designated for use by

BEMS

, you must obtain and install a digital certificate.

Your enterprise can sign its own digital certificates, acting as its own certificate authority (CA), or you can submit a certificate request to a well-known, third-party CA. Although you can preinstall the root authority for your own CA on each user’s device, it makes sense to get an independent CA-validated certificate.

In the following sections, references to SSL, CA-signed, and personal certificates refer to the digital certificate.

Section:

Connect prerequisites: Skype for Business

Mutual TLS (MTLS) certificates

Steps to create a CA-signed certificate for the local computer account using a CSR for BEMS

Steps to create a CA-signed for the local computer account using automatic enrollment for BEMS

Create a CSR for the local computer account for BEMS

Obtain a CA-signed certificate from the CA server

Import the CA-signed certificate on the CSR requesting BEMS

Create a Personal Certificate for the local computer account for BEMS

Export the CA-signed certificate and private key from the Microsoft Management Console

Import the CA-signed certificate and private key to additional BEMS instances

SSL certificate requirements for Skype for Business

SSL certificate requirements for
Skype for Business