In each, assume that a Microsoft Certification Authority is being used. You can verify that the SSL and client authentication works independently of Skype for Business SDN Interface by using a general purpose test tool, such as wfetch.exe.ĭetailed instructions for the specific certificate installations are found in the following procedures. For instructions, see Installing the trusted root certificate. Install a trusted root certificate on computers where the certificate authority reports it as not trusted.Install client certificates on all clients which are Dialog Listeners so they can talk with the SDN Manager, as well as on all SDN Manager instances so they can talk with subscribers acting as a server (if that subscriber requires authentication via client certificate).Install the server certificate on a server for each SDN Manager and subscriber.Request a certificate from a certificate server of the correct type.Finally, you need to ensure that the Windows communication foundation (WCF) configuration of the SDN Manager validates the client certificates set on the Dialog Listeners.To install certificates, you will follow this general approach:

In addition, you must install a server certificate on the subscribers, and also an appropriate client certificate on the SDN Manager host computers so you can authenticate it to the subscribers. You will need to use a client certificate on each front-end server in the Dialog Listener and a server certificate on each SDN Manager for the SDN Manager pool fully qualified domain name. You might also have to install a root certificate of the certification authority (CA), if it is not trusted. These certificates are needed for the SDN Manager, the Dialog Listener, and for subscribers. But for this to work, you must request certificates from an appropriate certification authority. To ensure secure message transport and client authentication, the Skype for Business SDN Interface components support mutual transport layer security (TLS). Applies to: Lync Server 2013 | Skype for Business 2015 | Skype for Business 2019

Skype login image