Generate Microsoft Lync Private Key On Macos

by
Microsoft Lync is a new tool for enterprises communication. It securised configuration requires several official certificates (web and lync flow) and internal ones for communication between servers.

/generate-a-public-key-ubuntu.html. Certificates for Microsoft Lync Microsoft Lync is a new tool for enterprises communication. It securised configuration requires several official certificates (web and lync flow) and internal ones for communication between servers. Certificate for web flow. You must get this certificate via FrontEnd Lync. Then copy/paste it on TMG reverse proxy. Microsoft Lync wants to use the OCKeyContainer keychain. Ran into a weird issue on Lync 2011 on my Mac machines (as a side note, how rubbish is this client? Let's hope the upcoming Skype for Business for MacOS is everything we expected and more ). It was putting up a prompt saying: Microsoft Lync wants to the 'OCKeyContainer. The Top 10 Benefits Of Microsoft Lync For Business Microsoft Lync is an enterprise-ready unified communications platform. Part of Microsoft Office 365, it is an easy-to-use cloud-based platform for online meetings, video conferencing, instant messaging and presentation sharing.


Certificate for web flow

You must get this certificate via FrontEnd Lync. Then copy/paste it on TMG reverse proxy.

Get this certificate with the powershell:

  1. Generate a CSR
    Request-CsCertificate -New -Type WebServicesExternal -Country FR -State « Rhone » -City « Lyon » -FriendlyName « Lync WebExternal Cert » -KeySize 2048 -PrivateKeyExportable $True -Organization « My organization » -Output C:CertificatesWebServicesExternal.csr
  2. Import the certificate and the certification chain
    Import-CsCertificate -Path « c:Certificatesp7-0123456789-12345.p7b » -PrivateKeyExportable $True

Note that you must order a UC kind of certificate (SAN) and provide (see SIP domain configuration):

  • The FQDN of the web access
  • The FQDN of the phone access
  • The FQDN of the meeting access

Certificate for lync flow

You must get this certificate via FrontEnd Lync.

Get this certificate with the powershell:

  1. Generate a CSR
    Request-CsCertificate -New -Type AccessEdgeExternal,DataEdgeExternal,AudioVideoAuthentication -Country FR -State « Rhone » -City « Lyon » -FriendlyName « Lync Edge External Single Cert » -KeySize 2048 -PrivateKeyExportable $True -Organization « My organization » -DomainName « sip.muorganization.com » -Output C:CertificatesWebServicesExternalSingle.csr
  2. Import the certificate and the certification chain
    Import-CsCertificate -Path « c:Certificatesp7-0123456789-12345.p7b » -PrivateKeyExportable $True
  3. Activate the certificate
    Set-CSCertificate -Type AccessEdgeExternal,DataEdgeExternal,AudioVideoAuthentication -Thumbprint XXXX

Notes

Note that you must order a UC kind of certificate (SAN) and provide (see external parameters configuration):

  • The FQDN of the SIP access
  • The FQDN of the Edge Web conference service access
  • The FQDN of the A/V service access

If you really want a Wildcard kind of certificate, consult Microsoft specifications here: http://technet.microsoft.com/en-us/library/hh202161.aspx

In order to use the same certificate on 2 platforms (e.g. Lync 2013 Frontal and Lync 2013 Edge), you must create an exportable private key while generating your CSR. See Microsoft recommendations here: http://technet.microsoft.com/fr-FR/library/gg398920.aspx. You'll then install the certificate on one of your platform and export the certificate (and its private key) to install it on other platforms.

Frequently encountered problems

'revocation check failed'

This issue is caused by Exchange that wants to check the CRL during the certificate importation. If its tool (using WinHTTP) can't access the web, the operation fails.
Troubleshoot: See our FAQ about OCSP protocol support

Lync Server Access Edge service fails to start with: “… service-specific error code -2146762487”

If you see the following message: Windows could not start the Lync Server Access Edge on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to the service-specific error code -2146762487., then it is probably that there's an error with the certification chain. You can confirm the cause if you can see the following error in the error logs:

fujitsu lifebook s6311 driver for mac You then need to check that the root and intermediate certificates are in Windows' stores. If a certificate is missing you can install it manually

Generate Microsoft Lync Private Key On Macos Download

Links

Last edited on 07/05/2017 08:17:12 --- [search]
© TBS INTERNET, all rights reserved. All reproduction, copy or mirroring prohibited. Legal notice. -- Powered by anwiki

General CSR Creation Guidelines

Before you can order an SSL certificate, it is recommended that you generate a Certificate Signing Request (CSR) from your server or device. Learn more about SSL certificates »

A CSR is an encoded file that provides you with a standardized way to send DigiCert your public key as well as some information that identifies your company and domain name. When you generate a CSR, most server software asks for the following information: common name (e.g., www.example.com), organization name and location (country, state/province, city/town), key type (typically RSA), and key size (2048-bit minimum).

If you aren't sure of the exact company name or location when you generate the CSR, don't worry; we can change and finalize that information during our review process before we issue the certificate.

Generate Microsoft Lync Private Key On Mac Os X

Once your CSR is created, you'll need to copy and paste it into the online order form when you go to purchase your SSL certificate. Online Certificate Order Form »