FavoriteLoadingAdd to favorites

To generate a Certificate Signing Request (CSR) for Windows Lync 2013 you will need to create a key pair for your server the public key and private key. These two items are a digital certificate key pair and cannot be separated. On Windows type systems PFX/PKCS12 requests are made, and are stored on the system. The private key will remain hidden on the windows system where the CSR request is made.

To generate a CSR on a Lync 2013 system perform the following.

Step 1: Generating your CSR:

  1. From the start menu click on the Lync Deployment Wizard.
  2. Click Install or Update Lync Server System.
  3. Under the Request, Install or Assign Certificate section click Run.Lync 2013
  4. Select External Edge Certificate and click Request.Lync 2013
  5. Click Next.
    Lync 2013
  6. Select Prepare the request now, but send it later (offline certificate request).Lync 2013
  7. Click on Browse to specify a location and path of your choice to save your CSR.Lync 2013
  8. Click Next.
  9. On the Specify Alternate Certificate Template click Next.
  10. Enter a friendly name for your new certificate.
  11. From the Bit Length drop down select 2048.
  12. Select Mark the private key as exportable.
    Note: If you do not select this feature you will not be able to export/migrate your certificate with its private key if you have multiple machines that require it.
  13. Click Next..
  14. Under Organization specify the legal name of your Organization.
  15. Under Organizational Unit specify the sub department of your organization. (Example: IT)
  16. Click Next
    Lync 2013
  17. Under the Country/Region drop down select your country.
  18. Specify the legal State/Province, and City/Locality of your organization.
  19. Click Next.
    Lync 2013
  20. The Subject Name and Subject Alternative Names will auto populate. Click Next.
  21. Check the box on SIP domains.
    Lync 2013
  22. On the Configure Additional Subject Alternate Names page specify other SANs needed. Click Next.
    Note: If Additional SAN names need to be added to the SSL certificate, this will need to be done during the enrollment process.
  23. On the Summary Page ensure the information is correct, and click Next.
  24. On the Executing Commands page ensure the Task Status is completed. Click Next.
  25. On the Certificate Request File page you can click view the CSR to then copy and paste it into an enrollment portal, alternatively it is saved to the location and path you specified earlier in the CSR creation.
  26. Click Finish to close the Certificate Request File window.Your CSR request has been created and is ready for you to copy and paste its contents into the enrollment portal.

If you are unable to use these instructions for your server, Acmetek recommends that you contact either the vendor of your software or the organization that supports it.

Microsoft Support:

For more information refer to Microsoft.

SSL Certificates for Microsoft Lync can be purchased at Acmetek.com

For Lync SSL Certificate Installation click here.

FavoriteLoadingAdd to favorites

About SSLSupportDesk:

SSLSupportDesk is part of Acmetek who is a trusted advisor of security solutions and services. They provide comprehensive security solutions that include Encryption & Authentication (SSL), Endpoint Protection, Multi-factor Authentication, PKI/Digital Signing Certificates, DDOS, WAF and Malware Removal. If you are looking for security look no further. Acmetek has it all covered!

Contact an SSL Specialist to get a consultation on the Website Security Solutions that can fit your needs.

Become a Partner and create additional revenue stream while the heavy lifting for you.