[This is pre-release documentation and subject to change in future releases. This topic's current status is: Milestone-Ready]

Topic Last Modified: 2010-07-19

Each Director requires a default certificate, a Web internal certificate, and a Web external certificate. For details about the certificate requirements for Directors, see Certificate Requirements for Internal Servers.

Use the following procedure to configure Director certificates. Repeat the procedure for each Director. The steps of this procedure describe how to configure a certificate from an Internal Enterprise Root certification authority (CA) deployed by your organization and with offline request processing. For information about obtaining certificates from an external CA, contact your IT department.

To configure certificates for the Director or Director pool

  1. In the Communications Server 2010 (Beta Refresh) – Deployment Wizard, next to Step 3: Request, Install or Assign Certificates, click Run.

  2. On the Certificate Wizard page, click Request.

  3. On the Certificate Request page, click Next.

  4. On the Delayed or Immediate Requests page, accept the default Send the request immediately option, and then click Next.

  5. On the Choose a certificate Authority (CA) page, select the desired internal Windows Certificate Authority, and then click Next.

  6. On the Certificate Authority Account page, specify alternate credentials to be used if the account you are logged on with does not have sufficient authority to request the certificate, and then click Next.

  7. On the Specify Alternate Certificate Template page, click Next.

  8. On the Name and Security Settings page, optionally specify a Friendly Name, accept the 2048-bit key length, and then click Next.

  9. On the Organization Information page, optionally specify organization information, and then click Next.

  10. On the Geographical Information page, optionally specify geographical information, and then click Next.

  11. On the Subject Name / Subject Alternate Names page, click Next.

    The subject alternative name (SAN) list should contain the name of the computer on which you are installing the Director (if a single Director) or the Director pool name, as well as the Simple URL names configured for the organization.
  12. On the SIP Domain setting page, select the Configured SIP Domains for all domains the Director will be handling, and then click Next.

  13. On the Configure Additional Subject Alternate Names page, add any additional required subject alternative names, and then click Next.

  14. On the Certificate Request Summary page, click Next.

  15. On the Executing Commands page, click Next.

  16. On the Online Certificate Request Status page, click Finish.

  17. On the Certificate Assignment page, click Next. Optionally, you can view the certificate purpose by double-clicking the certificate in the list.

  18. On the Certificate Assignment Summary page, click Next.

  19. On the Executing Commands page, click Finish.

  20. On the Certificate Wizard page, click Close.