Skip to main content

How to install Entrust SSL/TLS Certificate on Microsoft Skype for Business 2019 ?

User-added image

NOTE:
As of November 12, 2024, Entrust introduced a new TLS certificate hierarchy as part of the deployment. The TLS certificate delivery now includes two certificate chains. The delivery of these certificate chains can be in the form of:

  • Individual files. Intermediate 1 (filename: intermediate1.crt ) and Intermediate 2 (filename: intermediate2.crt ) or
  • Concatenate PEM file (filename: CertificateBundle1.pem ) or
  • P7B format file (filename: Certificatebundle.p7b )

Both intermediate/chain certificates must be installed in your environment.

Step-by-step:

1. Click the Download button in the pickup wizard to download your certificate files. Clicking the download button will produce a zip file that includes your Server Certificate, the Entrust chain/intermediate certificates(s) and the Entrust Root certificate. Extract the files from the zip file.

2. On the server, go to Start > Run > type MMC and hit enter .

3. Click File > Add Remove Snap-in.

4. Select Certificates and click Add .

5. Select Local Computer and click Finish .

6. Click Close .

7. Expand Certificates on the left hand side of the console window.

8. Expand the Trusted Root Certification Authorities folder and click on the Certificates sub-folder.

9. Right click on the Certificates sub-folder under Trusted Root Certification Authorities and select All Tasks > Import .

10. In the import wizard, browse to the Root.crt file downloaded in step 1 and complete the wizard.

11. In the MMC console, expand the Intermediate Certification Authorities folder. Right click on the Certificates sub-folder and select All Tasks > Import .

12. In the import wizard, browse to the Intermediate.crt file downloaded in step 1 and complete the wizard.

NOTE: As of November 12, 2024, the intermediate certificate came with two files: intermediate1.crt and intermediate2.crt. These intermediate/chain certificates must be imported into your server/appliance.

13. Click on Start , search for the Skype for Business Server Deployment Wizard and open it.

14. Click on Install or Update Skype for Business Server System .

User-added image

15. Click Run under Step 3 (Request, Install, or Assign Certificates).

User-added image

16. Click on the Import Certificate button to launch the Import Certificate window.

User-added image

17. Browse to the location of the ServerCertificate.crt file that you downloaded in step 1 and uncheck the box that says "Certificate file contains the certificate's private key". Click Next .

User-added image

18. Click Next in the Import Certificate window.

19. Click the Finish button once the task is completed.

User-added image

20. On Default Certificate section, make sure that all of the desired services have been selected. Click Assign .

User-added image

User-added image

Click Next to continue.

21. Make sure you have selected the friendly name that associated with your Entrust SSL/TLS certificate. Click Next button to continue.

User-added image

22. If the services assign correctly, the Task Status will show as Completed . Click the Finish button.

User-added image

User-added image