DetailPage-MSS-KB

Microsoft small business knowledge base

Article ID: 929395 - Last Review: August 14, 2014 - Revision: 17.0

On This Page

INTRODUCTION

To enable secure client access from the Internet to Microsoft Exchange Server, Microsoft works with public X.509 certification authorities (CAs) to make sure that you can obtain the certificates that you require to use the Domain Security feature.

Microsoft also works with CAs to make sure that you can get the certificates that you require to use Microsoft Lync Server.

More information

Many public certification authorities have created Exchange-specific websites that provide relevant documentation about their services. The documentation that is provided includes steps to complete the following tasks:
  • Complete the certificate enrollment process
  • Deploy the Domain Security feature
  • Enable secure client access from the Internet
The following table includes the names and websites for the certification authorities that issue Unified Communications certificates for Exchange Server and Lync Server.

Collapse this tableExpand this table
Certification authorityWebsite
Comodohttp://www.comodo.com/msexchange (http://www.comodo.com/msexchange)
DigiCerthttp://www.digicert.com/unified-communications-ssl-tls.htm (http://www.digicert.com/unified-communications-ssl-tls.htm)
Entrusthttp://www.entrust.net/microsoft/ (http://www.entrust.net/microsoft/)
GeoTrusthttp://www.geotrust.com/ssl/ssl-certificates-san-uc/ (http://www.geotrust.com/ssl/ssl-certificates-san-uc/)
GlobalSignhttp://www.globalsign.com/ssl/buy-ssl-certificates/unified-communications-ssl/ (http://www.globalsign.com/ssl/buy-ssl-certificates/unified-communications-ssl/)
GoDaddyhttps://www.godaddy.com/ssl/ssl-certificates.aspx (https://www.godaddy.com/ssl/ssl-certificates.aspx)
Symantec
(formerly VeriSign)
https://www.symantec.com/theme.jsp?themeid=san-ssl-certificates (https://www.symantec.com/theme.jsp?themeid=san-ssl-certificates)
Thawtehttp://www.thawte.com/ssl/san-uc-ssl-certificates/index.html (http://www.thawte.com/ssl/san-uc-ssl-certificates/index.html)
WISeKeyhttp://www.wisekey.com/en/Products/digital-identities/Pages/ssl-solutions.aspx (http://www.wisekey.com/en/Products/digital-identities/Pages/ssl-solutions.aspx)

Note If you are a public X.509 certification authority who wants to be added to this list, or if you are an Exchange customer who wants to provide feedback about the documentation that is provided on the X.509 certification authority websites, you can contact Microsoft at the following email address:
ucoip@microsoft.com (mailto:ucoip@microsoft.com)
For more information about the SAN attribute and certificates, go to the following Microsoft Exchange Team Blog websites:
http://msexchangeteam.com/archive/2007/04/30/438249.aspx (http://msexchangeteam.com/archive/2007/04/30/438249.aspx)

http://msexchangeteam.com/archive/2007/07/02/445698.aspx (http://msexchangeteam.com/archive/2007/07/02/445698.aspx)

Obtaining Unified Communications certificates for Microsoft Exchange Server

For more information about how to use the Exchange Management Shell to create a certificate request file that contains a certificate request in PKCS#10 format, go to the following Microsoft TechNet websites:
http://technet.microsoft.com/en-us/library/aa995942.aspx (http://technet.microsoft.com/en-us/library/aa995942.aspx)

http://technet.microsoft.com/en-us/library/aa998327.aspx (http://technet.microsoft.com/en-us/library/aa998327.aspx)

How to obtain Unified Communications certificates for Lync Server

  1. Generate certificate signing requests (CSRs) by using the Communications Server Certificate Wizard.

    Note This wizard is available when you install Lync Server.
  2. Submit the CSR that you generated to the certification authority at the websites that are mentioned previously in this article.
  3. After you get the certificate and save the certificate file to your computer, use the same Lync Server Certificate Wizard to install the certificate.
If you want to know more about the Lync Server Certificate Wizard and about how to install certificates for Lync Server, consult the deployment documentation that is available on the Lync Server Technical Library at the following URL:
http://technet.microsoft.com/en-us/library/gg398664.aspx (http://technet.microsoft.com/en-us/library/gg398664.aspx)
The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

Applies to
  • Microsoft Exchange Server 2007 Enterprise Edition
  • Microsoft Exchange Server 2007 Standard Edition
  • Microsoft Office Communications Server 2007 Enterprise Edition
  • Microsoft Office Communications Server 2007 Standard Edition
  • Microsoft Exchange Server 2010 Standard
  • Microsoft Exchange Server 2010 Enterprise
  • Microsoft Lync Server 2010 Enterprise Edition
  • Microsoft Lync Server 2010 Standard Edition
  • Microsoft Lync Server 2013
  • Microsoft Office Communications Server 2007 R2 Enterprise Edition
  • Microsoft Office Communications Server 2007 R2 Standard Edition
Keywords: 
kbhowto kbexpertiseadvanced kbinfo KB929395
Share
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support