system requirements for skype for business

And SAN entries should include every single node in the public DMZ, including the hostname mentioned in Subject name.The hostname referenced by _sipfederationtls._tcp SRV record should be put as Subject name.On the other hand, if yours is going to be a public DMZ deployment, then your requirements will be as follows: Subject Alternative Name (SAN) entries must be included for every node in your pool and common application FQDN.Subject Name should be same as Trusted Application Pool FQDN.You must use a proper UC certificate only for deployment of these things.įor an on-premise Lync/SfB deployment here’re the requirements of CSR: Keep in mind that wildcard certificates are not supported for Lync/SfB deployments.

Certificate authorities will verify your given details and send your certificate. Initially, you need to create request for certificate and submit it for validation procedure. It is worthwhile to acquiring your SAN SSL certificate from trusted certificate authorities. While an SSL certificate may initially this mean some trouble as you’ll have to add multiple SAN names to your certificate, the hard work that you do now will save you precious time in future as you’ll have to manage just one single SAN SSL certificate for all your conferencing nodes (unless you there’re multiple domains/subdomains to be managed). These types of certificates are also known as UCC or Exchange Server SSL Certificates. Due to this particular reason the certificate signing request (CSR) that you generate for your conferencing nodes should contain multiple Subject Alternative Names (SANs). This will allow you to add redundant conferencing nodes easily and also to add multiple SIP domains for your Lync/SfB federation. Whether you want to deploy your Lync/SfB server on premises, or on a public DMZ, you should use the same certificate that’s installed on your conferencing nodes. Let’s get started:Ĭreating a Certificate Signing Request (CSR) So here we’ll take a look on all those requirements, and also on the entire process of implementing a SSL/TLS certificate for your Lync/SfB server. They’re very strict, so you need to understand them properly if you want your Lync/SfB deployment to work flawlessly. However, the SSL/TLS certificate requirements for both of them are a tricky affair. Therefore, if you want to deploy any of them for your company, you’ve made a great choice. A large number of companies across the globe rely on them to work with teams in a better way. Microsoft Lync and Skype for Business are two of the most important tools in the domain of workspace collaboration.

System requirements for skype for business