Certificate Requirements

The Director role in Lync Server is much like any other role in that it uses certificates for communication to other servers and for client services. There are three different types of certificates a Lync Server Director requires, each with slightly different naming requirements. Typically, the same certificate will be assigned to each three functions.

• Default—The default certificate is used for MTLS communications between servers and for securing SIP signaling in client communications. The certificate contains the server name in the subject field, the pool name as a subject alternative name, and internally supported SIP domains as a subject alternative name in the sip.<SIP Domain> format.

• WebServicesInternal—The WebServicesInternal certificate is used to secure communication for internal clients to the web services. This certificate contains the internal web services that FQDN defined in the topology for the pool. This certificate is bound to the internal web services’ website in IIS.

• WebServicesExternal—The WebServicesExternal certificate is used to secure communication for external clients to the web services. This certificate contains the external web services FQDN defined in the topology for the pool. This certificate is bound to the external web services’ website in IIS.