Link to home
Start Free TrialLog in
Avatar of arhoneyc
arhoneyc

asked on

Change FQDN on OWA & Lync to match SSL now that internal addresses are not allowed

I had to renew my SSL, which has our SharePoint, OWA & Skype (Lync) on it. goDaddy said as of Nov 1st they will no longer support internal addresses. I removed the internal addresses from the SAN's, but of course the servers do not work now as they can't be located in the certificate.

I contacted goDaddy and the only reference they had for from an Exchange Server, which also says it does not apply to Windows 2012 server which we are using.

Can anyone point me in the right direction here?

SharePoint 2013 (working)
Office Web Apps 2013
Skype for Business 2015
All in Hyper-V on Windows Server 2012 R2
Avatar of arnold
arnold
Flag of United States of America image

Any reason you are not using internal CA for internal certificate issuing?

You have an external connector with external named certs, and have internal connectors for internal ...(port change on the internal server for the external connector port forwarding from the  firewall)
Avatar of arhoneyc
arhoneyc

ASKER

No reason other than lack of knowledge :)

So if I install a CA then that gets the goDaddy certs and then gives me internal certs?
SOLUTION
Avatar of Jeff Glover
Jeff Glover
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks for your help guys. I started down the CA rabbit hole and can see I have a lot to learn, but it's good stuff.

I resolved my Web Apps issue....turned out the ip address for the old server was hard coded in the hosts file. I about ripped my hair out over this one :)

I was not planning on doing an Edge server. We are a pretty small company, but I have the resources to do it so I'm going to read up on it. So, I'll put off publishing the Skype server until I get a better grip on it.