Forum Discussion

Tech10's avatar
Tech10
Copper Contributor
Jul 05, 2020

Edge external certificate - No domain name

Hi All,

 

I have an observation to discuss. I noticed that in Lync 2013 deployments the Edge external certificate has got the access edge, sip, webconf as well as domain name.

 

I deployed SFB 2019 in coexistence mode with Lync 2013 pool and raised a CSR from SFB 2019 Edge for external cert, I did not see the domain name in it. Is this a change with SFB 2019. Will the certificate work just fine with access edge, sip and webconf FQDNs only. Appreciate some guidance for it.

 

Thanks,

Sy

3 Replies

  • SiplifiGroup's avatar
    SiplifiGroup
    Brass Contributor
    Jul 11, 2020

    Tech10 

     

    Hi Syed, when you mention you did not see the domain name in it, are you referring to your internal domain, such as domain.local? Thanks.

     

    -----------------

     

    https://www.siplifi.com | SiplifiGroup 

    • Tech10's avatar
      Tech10
      Copper Contributor
      Jul 13, 2020

      Hi,

       

      Its the routable SIP domain name (abc.com for example is my sip domain is sip.abc.com) in the external certificate. I noticed in some enviornments its on the external cert but not in some.

       

      Thanks,

      Az

      • SiplifiGroup's avatar
        SiplifiGroup
        Brass Contributor
        Jul 16, 2020

        Tech10 

         

        Hi Syed, thanks for the update. The domain name on it's own is not required on the certificate, you only need the service specific names such as sip.abc.com and webconf.abc.com, there is no need to just have abc.com specified on the certificate. I hope this helps.

         

        -------------------

         

        https://www.siplifi.com | SiplifiGroup 

Resources