Microsoft Lync 2013 – CSR Instructions

To generate a Certificate Signing Request (CSR) for Windows Lync 2013 you will need to create a key pair for your server the public key and private key. These two items are a digital certificate key pair and cannot be separated. On Windows type systems PFX/PKCS12 requests are made, and are stored on the system. The private key will remain hidden on the windows system where the CSR request is made.

To generate a CSR on a Lync 2013 system perform the following.

Step 1: Generating your CSR:

1. From the start menu click on the Lync Deployment Wizard.
2. Click Install or Update Lync Server System.
3. Under the Request, Install or Assign Certificate section click Run.
4. Select External Edge Certificate and click Request.
5. Click Next.
   
6. Select Prepare the request now, but send it later (offline certificate request).
7. Click on Browse to specify a location and path of your choice to save your CSR.
8. Click Next.
9. On the Specify Alternate Certificate Template click Next.
10. Enter a friendly name for your new certificate.
11. From the Bit Length drop down select 2048.
12. Select Mark the private key as exportable.
    Note: If you do not select this feature you will not be able to export/migrate your certificate with its private key if you have multiple machines that require it.
13. Click Next..
14. Under Organization specify the legal name of your Organization.
15. Under Organizational Unit specify the sub department of your organization. (Example: IT)
16. Click Next
    
17. Under the Country/Region drop down select your country.
18. Specify the legal State/Province, and City/Locality of your organization.
19. Click Next.
    
20. The Subject Name and Subject Alternative Names will auto populate. Click Next.
21. Check the box on SIP domains.
    Click Next.
    
22. On the Configure Additional Subject Alternate Names page specify other SANs needed. Click Next.
    Note: If Additional SAN names need to be added to the SSL certificate, this will need to be done during the enrollment process.
23. On the Summary Page ensure the information is correct, and click Next.
24. On the Executing Commands page ensure the Task Status is completed. Click Next.
25. On the Certificate Request File page you can click view the CSR to then copy and paste it into an enrollment portal, alternatively it is saved to the location and path you specified earlier in the CSR creation.
26. Click Finish to close the Certificate Request File window.Your CSR request has been created and is ready for you to copy and paste its contents into the enrollment portal.

If you are unable to use these instructions for your server, Acmetek recommends that you contact either the vendor of your software or the organization that supports it.

Microsoft Support:

For more information refer to Microsoft.

SSL Certificates for Microsoft Lync can be purchased at Acmetek.com

For Lync SSL Certificate Installation click here.