Solved

Lync2010 Certificate Requirements

Posted on 2012-03-30
7
403 Views
Last Modified: 2012-04-19
Hi,

I want to know how many  public certiifcates i do require for lync 2010 enterprise for remote access and federation.

please give me more details on this lync 2010 certiifcates parts
0
Comment
Question by:Manoj Bojewar
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 7

Assisted Solution

by:abdulalikhan
abdulalikhan earned 500 total points
ID: 37786547
You only need a single SAN certificate with at least six SAN names,

lyncpool.domain.com
dialin.domain.com
meet.domain.com
lyncdiscover.domain.com
sip.domain.com
lyncadmin.domain.com

You also need to enter the above entries as HOST 'A' records in external DNS server with at least two public IPs.

lyncpool.domain.com      x.x.x.1
dialin.domain.com                        x.x.x.1
meet.domain.com            x.x.x.1
lyncdiscover.domain.com      x.x.x.1
sip.domain.com            x.x.x.2
lyncadmin.domain.com      x.x.x.1

You also need to enter two SRV records in the external DNS.

_sip._tls.domain.com > point to > sip.domain.com            port 443

_sipfederationtls._tcp.domain.com > point to > sip.domain.com      port 5061
0
 
LVL 4

Author Comment

by:Manoj Bojewar
ID: 37826352
what about Webconf and AV service
0
 
LVL 7

Assisted Solution

by:abdulalikhan
abdulalikhan earned 500 total points
ID: 37826392
These DNS records will be enough to provide services to every feature of LYNC. Meet and Dialin is used to webconf and AV.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 4

Author Comment

by:Manoj Bojewar
ID: 37836225
my Audio and Video Conferencing is not working and also online meeting is not working.. how to fix this issue
0
 
LVL 7

Accepted Solution

by:
abdulalikhan earned 500 total points
ID: 37836237
Have you setup the certificate correctly with all the Six SAN names I mentioned. Also confirm if the internal DNS is set properly.

You asked for certificate names which I mentioned and this is something else. Anyways Now explain the scenario that how you have setup your lync. The Question is not mentioning any details.
0
 
LVL 4

Author Comment

by:Manoj Bojewar
ID: 37836355
its very difficult for me to explain my setup.. but i will give you some brief here...

i have four servers installed for lync 2010 Enterprise

1)Lync Front ent
2)Lync Backend database
3)Lync Monitor and archive server
4)Lync Edge server

i have two Lan card on edge server one with without gateway and DNS (internal edge ) and another with three IP with gateway and public DNS (External)

i have certiifcate installed for internal edge interface goh-lyndedge.hosting.local and external certiifcate with SIP.exchangemails.com and AV.exchangemails.com and webconf.exchangemails.com

it would be greate if we have remote session so that i can show you all the problems.
0
 
LVL 7

Expert Comment

by:abdulalikhan
ID: 37836388
Drop me an email at abdulalikhan@hotmail.com and we will set a time.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains how to install and use the NTBackup utility that comes with Windows Server.
A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question