?
Solved

Lync Server 2010 SSL Cert & External Access

Posted on 2011-10-18
8
Medium Priority
?
756 Views
Last Modified: 2012-05-12
I have recently deployed a Lync Server STD running on a VM.  It started out as a test server and now I would like to put it into production.  Originally, all we wanted was internal chat, presence, and some video chat features so this is what I did.  I created a self-signed cert (for testing) and got the chat and presence working.  The issue with the cert is that I have an interal domain name ABC.LOCAL and an external domain name XYZ.COM.  Users have their primary email addresses as XXX@XYZ.COM but the cert is obviously named as ABC.LOCAL as it was created by the Lync Server.

I am now ready to purchase a UCC cert and install it, as well as adding the ability to chat externally, and chat with other services like AOL, GTALK, etc.

My questions are:

What do I need to do to add the new cert, and when I do should all of the SIP Addresses change from abc.local to xyz.com?
How do I enable external access and the ability to connect to other services, and does this require another server (Edge)? We will have roughly 200 people using the service.
0
Comment
Question by:BSModlin
  • 4
  • 3
7 Comments
 
LVL 26

Assisted Solution

by:Tony J
Tony J earned 2000 total points
ID: 37017308
Here's a step-by-step how to for the UCC. Not sure what you mean by "should all the SIP addresses change" - do you mean automatically?

http://uc-technology.blogspot.com/2011/06/how-to-create-customer-certificate-for.html

Yes, you require an edge server (though technically, I believe it could be done with just a VPN). Some step-by-step instructions are here:

http://ucken.blogspot.com/2011/07/configuring-lync-for-external-access.html

0
 

Author Comment

by:BSModlin
ID: 37017352
What I mean by the SIP address is since internal and external domain names are different (abc.local and xyz.com) which one should it be?

If I do not want to use the VPN option, you are saying that an EDGE server is necessary.... does it have to be dedicated and on a separate server from the Lync Server?
0
 
LVL 26

Accepted Solution

by:
Tony J earned 2000 total points
ID: 37017402
I think this will help answer your questions re Edge:

http://www.microsoft.com/download/en/details.aspx?id=11379

To the best of my knowledge, it needs to be a dedicated machine. Usually in the DMZ and not domain joined but rather with LDS on it. I've never seen or heard of one on the Lync server, but neither have I ever bothered trying to find out, to be honest.

The SIP names would usually be the external domain.

Some information about that here:

http://social.technet.microsoft.com/Forums/en-US/ocsplanningdeployment/thread/dcdd5de1-383d-498c-a6f2-89bd71aab843/

Ok, it talks about multiple SIP domains but the core information is there - it's down to DNS.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 

Author Comment

by:BSModlin
ID: 37017829
Ok, and the last question... Regarding the UCC cert, what names need to be included in it? Internal and External?

lyncServer.abc.local
lyncServer.xyz.com

Are there any others, like for web conferencing, dialing in, etc...????

0
 
LVL 26

Assisted Solution

by:Tony J
Tony J earned 2000 total points
ID: 37017869
0
 

Author Closing Comment

by:BSModlin
ID: 37017888
Thanks man!!  Much appreciated...
0
 
LVL 26

Expert Comment

by:Tony J
ID: 37017928
You're more than welcome. Sorry it got overlooked for so long. Good luck with the rollout.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As with any other System Center product, the installation for the Authoring Tool can be quite a pain sometimes. This article serves to help you avoid making these mistakes and hopefully save you a ton of time on troubleshooting :)  Step 1: Make sur…
Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question