We use public CA for all certs.

For the front end servers in the pool, we purchased 10 SAN UCC certificate. We are currently using 9/10 SANs. 

Is this the same certificate that will be used for mobility? I am trying to plan and have not yet installed it. 

Will it require lyncdiscover.domain.com and lyncdiscoverinternal.domain.com fqdns to be applied to the same cert? If so, I'll need to upgrade our certificate with out public CA provider.

Thanks!

Josh

Yes, you can use the same certificate for mobility.

When you talk about certificate, are you talking about external certificate that you are going to use with Reverse Proxy?  In this case, no, you do not need to have lyncdiscoverinternal.domain.com name on that certificate, but you need lyncdiscover.domain.com

You can use internal CA with your internal Servers. You need external certificate only for Reverse Proxy and for the Edge servers.

Thank you.

The SAN lyncdiscover.domain.com and lyncdiscoverinternal.domain.com is required to be added to the certificate of director and Front End Server.

For the details, see  http://technet.microsoft.com/en-us/library/hh690030(v=ocs.14).aspx

KocharTech offers Managed Services solutions in the field of Enterprise Mobility. Our solutions enable enterprise customers to secure, manage and grow their dispersed workforce.

Through our deep industry experience and a 360 degree view of empowering workforce through mobility we help clients create successful businesses by maximizing ROI and minimizing mobility related risks.