Open Skype for Business Server Management Shell and run “Start-CsWindowsService” Once certificate part is done, start the Edge server services Once you receive the certificate then Import and assign the certificate. Sent the *.req file to you Public CA vendor and get the certificate. Once certificate request has been completed successfully, click on Next

Select “offline certificate request” and click on Nextīrowse to location to save the certificate request fileĮnter “Friendly name” and make sure “Mark the certificate’s private key as exportable” is being selectedĮnter alternative SANs if you have any (For Example: If you want to use the same certificate for reverse proxy as well add same names such as, , etc.) Once Certificate is assigned to “Edge internal”, you can select the “External Edge certificate…” and click on “Request” Now, select “Edge internal” and click on “Assign” Once done with root certificate installation, go to the Certificate Wizard and click on “Import Certificate” If you don’t install root certificate then you can face below error while assigning certificate Install only root certificate form “certificate chain” and store it to “Local Computer” under “Trusted Root Certification Authorities” Install the root certificate on your Edge server, you may run “Download certificate chain” to install the root certificate. Select “Base 64 encoded” and download both the files Select “Submit a certificate request …… PKCS#7 file”Ĭopy and paste the *.req file content here and select “Web Server” as a certificate template Once completed successfully, click on NextĪs you have request CSR for internal certificate, copy the *.req file and go to the internal CA to request the internal certificate.Īccess your ADCS through web and click on “Request a certificate” Select offline certificate request and click on Nextīrowse to location where you want to store the certificate requestĮnter friendly name and select “Mark the certificate’s private key as exportable”Īdd all the Edge servers FQDN which are going to be part of this pool Select “Edge internal” and click on “Request” Follow the step by step process to request and assign the certificates:

For internal certificate you can use internal CA while for external certificate you can generate the request and send it to your external CA to get the public certificate. Edge server need two different types of certificates one for internal and another for external. Once you are done with Edge server installation you can request a certificate.

Part IV of Skype for Business Server Edge Pool deployment focus on certificates. See Part I, Part II, Part III and Part IV for step by step process. Skype for Business Server Edge Pool deployment has four parts to cover end to end deployment process.

Skype for business certificate