SOLVED

is a sip.Domain Cert required for Teams Telephony?

%3CLINGO-SUB%20id%3D%22lingo-sub-3427794%22%20slang%3D%22en-US%22%3Eis%20a%20sip.Domain%20Cert%20required%20for%20Teams%20Telephony%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3427794%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3CBR%20%2F%3E%3CBR%20%2F%3EWe%20migrated%20from%20Skype%20for%20Business%20OnPrem%20to%20Teams%20direct%20routing%20for%20Telephony%20last%20year.%20Today%2C%20I%20got%20an%20email%20from%20our%20security%20team%2C%20asking%20if%20the%20sip.%3CEM%3Edomain%3C%2FEM%3E%20cert%20was%20still%20required%20and%20if%20so%20can%20I%20generate%20a%20CSR%20for%20them%20to%20renew%20it%20as%20it's%20about%20to%20expire.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20don't%20recall%20applying%20this%20cert%20anywhere%20in%20our%20Teams%20config%2C%20though%20we%20do%20still%20have%20entries%20in%20DNS%20for%20sip.%3CEM%3Edomain%20%3C%2FEM%3Eboth%20in%20internal%20and%20external%20DNS%20and%20_sip._tls%20in%20external%20DNS%20which%20all%20point%20to%20sipdir.online.lync.com%3CBR%20%2F%3E%3CBR%20%2F%3ECan%20anyone%20advise%20if%20the%20sip.%3CEM%3Edomain%3C%2FEM%3E%20cert%20is%20still%20required%20for%20Teams%3F%20-%20my%20assumption%20is%20that%20this%20was%20something%20that%20was%20purchased%20for%20Skype%20for%20Business%20(which%20predates%20me%20here).%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%3CBR%20%2F%3E%3CBR%20%2F%3EDale%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3427794%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECalling%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3428067%22%20slang%3D%22en-US%22%3ERe%3A%20is%20a%20sip.Domain%20Cert%20required%20for%20Teams%20Telephony%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3428067%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1129300%22%20target%3D%22_blank%22%3E%40Dale_LTU%3C%2FA%3E%26nbsp%3BIf%20you%20no%20longer%20have%20a%20Lync%20Edge%20server%20there%20isn't%20anywhere%20that%20would%20house%20a%20certificate.%20All%20the%20Teams%20capabilities%20are%20using%20Microsoft's%20own%20certificates.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3444272%22%20slang%3D%22en-US%22%3ERe%3A%20is%20a%20sip.Domain%20Cert%20required%20for%20Teams%20Telephony%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3444272%22%20slang%3D%22en-US%22%3EThanks%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1292%22%20target%3D%22_blank%22%3E%40Steven%20Collier%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EThat's%20what%20I%20thought%2C%20I%20just%20wanted%20to%20double%20check%20I%20wasn't%20missing%20something%20before%20I%20told%20them%20not%20to%20renew%20it.%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi,

We migrated from Skype for Business OnPrem to Teams direct routing for Telephony last year. Today, I got an email from our security team, asking if the sip.domain cert was still required and if so can I generate a CSR for them to renew it as it's about to expire.

I don't recall applying this cert anywhere in our Teams config, though we do still have entries in DNS for sip.domain both in internal and external DNS and _sip._tls in external DNS which all point to sipdir.online.lync.com

Can anyone advise if the sip.domain cert is still required for Teams? - my assumption is that this was something that was purchased for Skype for Business (which predates me here).

Thanks

Dale

2 Replies
best response confirmed by Dale_LTU (Occasional Contributor)
Solution

@Dale_LTU If you no longer have a Lync Edge server there isn't anywhere that would house a certificate. All the Teams capabilities are using Microsoft's own certificates.

Thanks @Steven Collier

That's what I thought, I just wanted to double check I wasn't missing something before I told them not to renew it.