hello everybody

im trying to deploy lync server 2010 standard edition on my network , but im getting stuck at certificate authority .

i downloaded lync server 2010 (180 day  trial ) from microsoft website ,and i know nothing about how to get this certificate.

must i buy a certificate to try lync server ?  if this is the case , so why its called TRIAL ?!

please anyone can help ?

thanks a lot :)

AliTaher -

The requirement is for you to have an internal certificate authority.  You do not need to purchase a certificate unless you plan to do external access / federation / public IM connectivity.  You can do everything internal for 180 days when you issue a certificate from an internal CA which can be your domain controller if you add Microsoft certificate services to it.

Mark

thanks marc for the reply

can you please give me more details about how to get this certificate from the domain controller ?

Is this windows server 2003 or 2008 domain controller?

If 2008 you need to add the Microsoft Certificate Services role in the add new role wizard.  Select Enterprise Root CA and enable web enrollment.

Mark

Here is a nice certificate services guide:

http://technet.microsoft.com/en-us/library/cc772393(WS.10).aspx

thanks marc !!

should i do all the steps in the guide that you proposed to me ?

and in summary ,  do i have to generate a certificate from the DC and request it from the installation of lync server or it will be automatically generated and suggested when i request a certificate ?

sorry if its a silly question but i cant try this now !!

To set up an enterprise root CA

You dont need to setup an online responder or create any templates. 

After you do this, make sure replication has completed for AD, reboot the server you will be installing Lync on or run gpupdate /force.  Then you will request and assign the certificate right from within the Lync deployment wizard.

Have Fun!

You really only need to do the steps under the heading:

To set up an enterprise root CA

 

You dont need to setup an online responder or create any templates. 

 

After you do this, make sure replication has completed for AD, reboot the server you will be installing Lync on or run gpupdate /force.  Then you will request and assign the certificate right from within the Lync deployment wizard.

Hav

ok internal works fine. What about if i wanted to access externally and my lync enable user want to connect using lync client. does this CA works or have to get public certificate from godday or some other authority.