Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All

Certificate summary - Reverse proxy in Lync Server 2013

Lync Server 2013

Topic Last Modified: 2012-11-14

Certificate requirements for the reverse proxy are much simpler than that for the Edge Servers. The provided flowchart presents the requirements necessary. The accompanying table presents typical certificate subject name and subject alternative names in relation to the scenarios that we have been reviewed in the Edge Server discussions. For more details on the Edge Server scenarios, see Scenarios for external user access in Lync Server 2013.

Certificates Flow Chart for Reverse Proxy

Certificates Flow Chart for Edge Server

Reverse Proxy: External Interface

Component Subject name Subject alternative name (SAN)/Order Comments

Reverse Proxy









Certificate must be issued by a public CA and with the server EKU. Services include Address Book Service, distribution group expansion Office Web Apps for conferencing, and Lync IP Device publishing rules. Subject alternative name includes:

  • External Web Services FQDN for Front End Server or Front End pool

  • External Web Services FQDN for Director or Director pool

  • Dial-in conferencing

  • Online meeting publishing rule

  • Office Web Apps for conferencing

  • Lyncdiscover (Autodiscover)

The optional wildcard replaces both meet and dialin SAN

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
© 2015 Microsoft