Lync 2013 standard edition server disadvantages

I have 3000 users, client is so cost effective , wanna insisting on Lync 2013 standard edition server. no enterprise voice
Feature required :- IM.presence, A/V conf, persistence chat, external access.
planned servers :- 1 Standard server in DC, 1 in DR. 1 edge server in DC and 1 in DR
1. if i make a pool of standard servers, then will it serve as HA, if yes how much time wil take for failover and what would be the impact on users?
2. If complete DC is down how mch time would take for fail-over and what is the procedure, impact on users?
3. can i collocate persistence chat role on standard edition? any limitation? how backend sizing would be for persistence chat as sql express would be there
4. can i suggest any better solution with standard servers where HA in DC .

For 3000 users Standard Edition will be fine. Use the capacity planner to size out your environment. http://www.microsoft.com/en-us/download/details.aspx?id=36828
1. It won't really serve as HA, as pool pairing is the only option it's more of a DR solution. The RTO for a pool failover is 30mins. So it could take anywhere up to 30mins. http://technet.microsoft.com/en-us/library/jj205079.aspx
2. Same as above. Here is how you failover http://technet.microsoft.com/en-us/library/jj204678.aspx
3. Yes, you can co-locate Persistent Chat on the Front End with Standard Edition. If sized correctly, there should be no performance issues.
4. The only option with Standard is Pool Pairing, so no better suggestions.
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
Georg Thomas | Lync MVP
Blog www.lynced.com.au | Twitter
@georgathomas
Lync Edge Port Check (Beta)
This forum post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Similar Messages

Lync 2013- Standard Edition - Persistent Chat

What is the capacity of the Persistent Chat if it is collocated on Lync 2013 Standard edition front end ?
ie, number of chat rooms /usage?
In a Lync 2013 standard edition deployment if Persistent Chat is on separate server, can the SQL be offloaded to central SQL cluster enviornment or it will be held on the local server?

I haven't seen a chart that really defines the capacity, and it's difficult to measure because it's difficult to say how active the rooms will be or how much content you'll generate. That much is different from organization to organization.
There are some guidelines in general here:
https://technet.microsoft.com/en-us/library/gg615006(v=ocs.15).aspx but they don't really touch the standard model.
The pChat database can be offloaded to a central SQL cluster if you'd prefer, there are no requirements to collocate it with the local Lync databases.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Lync 2013 Standard Edition on Cisco UCS E-Series

Hello,
We have a working Lync 2013 deployment:
- Front-End Enterprise Pool consisting of 3 FE servers
- one Edge Server
- one Back-End server
- one Mediation Server
- one IP PBX gateway, where ITSP's SIP trunks end.
Because we have geographically distributed offices, we are considering deploying of branch offices deployments.
Technet recommends to use SBA for branch offices where there are less than 1000 users. But in case of WAN outage, no conferencing will be available for branch users.
Lync 2013 Standard edition branch deployment would offer all Lync features in case of WAN outage.
In every branch, we consider deploying a Cisco ISR G2 router for terminating branch SIP trunks. This equipment have option to add Cisco UCS E-Series blade that supports CPU with hardware virtualization and supports decent amount of RAM (up to 16GB and up
to 48GB).
Have anyone experience with deploying Lync Standard Edition on this equipment - Cisco UCS E-Series blades? In every branch office there are up to 50 - 500 users that will use Lync.
Thanks,
Andrei Moraru Endava

Hi,
I don’t think you can deploy Lync server 2013 on Cisco UCS E-Series blades.
Here is a link below of “System Requirements for Servers Running Lync Server 2013” may help you:
http://technet.microsoft.com/en-us/library/gg398588.aspx
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Certificate Requirement for Lync 2013 Standard Edition

I have successfully run the setup of lync 2013 standard edition now I am stuck due to certificates required for lync 2013. when I generate a csr. it show the subjected urls for that.
hostname.domain.com
sip.domain.com
diali.domain.com
meet.domain.com
admin.domain.com
lyncdiscover.domain.com
lyncdiscoverinternal.domain.com
im.domain.com (External URL)
so if I go for 3 party CA then I need 8 certicate only for internal lync. As I also need to connected federated partner and external user so I need Edge for again I need 3 more certificates
web.domain.com
a/v.domain.com
sip.domain.com
now when I go for these certificate it quit costly and I didn't understand why such certifcates required. can anyone help me to fix such requirement.
Or, what are the necessary url to which I buy 3 party CA rest leave as it is.
I also want to deploy Edge with single adopter as we have only one network so can anyone assist me to proceed it further.
Talha Faraz Malik

To save on the cost of your third party certificates, I would deploy an internal certificate authority to sign certificates for your internal front end. For your third party certificate, you would only need the SANs for the edge and for your
reverse proxy and as Edwin said, this can be a single cert with multiple SANs.
For example, for your edge you would need:
sip.domain.com
web.domain.com
You would not need A/V as this role does not require a SAN on your certificate. On the same certificate, which you could also use on your reverse proxy, you'd likely want the following FQDNs.
lyncdiscover.domain.com
im.domain.com (your external web services FQDN)
meet.domain.com
dialin.domain.com
You may also want to consider your internal web services FQDN and include the following so third party mobile devices can connect without needing a certificate installed:
im_internal.domain.com (your internal web services FQDN)
lyncdiscoverinternal.domain.com
I'm sure that's not entirely clear yet, so feel free to ask more questions or what the purpose of each is.
When you say Edge with a single adapter, you mean a single adapter in a DMZ or internal? You definably want two NICS, both in separate DMZs, but I've managed to get the edge working with a single adapter in a DMZ before. What you don't want is
the edge in your internal network.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Lync 2013 Standard backup questions

Hello
I need to backup our Lync 2013 Standard Edition setup.
We have Only one server atm.
Looking at this post for inspiration:
http://blogs.technet.com/b/heyscriptingguy/archive/2014/06/28/weekend-scripter-basic-lync-server-2013-backup-and-restore-part-1.aspx
As far as i can understand, i don't need to do SQL backup at all? Or am i missing the point?
Would I be able to restore my Lync from these 3 commands:
Export-CSConfiguratiom, Export-CSLisConfiguration and Export-CsUserData - Is that enough for a disasterrecovery?
And a bonus question:
When i run Export-CSLisConfiguration . The export only contains the following:
<?xml version="1.0"?>
<LisDatabase xmlns="urn:schema:Microsoft.Rtc.Lis.Database.2008"/>
Is that not incomplete somehow?

That much would get you back up and running, yes. But it may not be a "full" restore.
For example, if you have persistent chat data, it wouldn't necessarily be included in there. If you have an archiving database where all IMs are sent, that information wouldn't be in the PowerShell exports above. If you don't have a copy of the
certificate and private key, that's lost.
Typically, I run my own custom version of Lasse's backup script https://gallery.technet.microsoft.com/Backup-script-for-Lync-2013-aacbb9b9
That pulls all the data, including your file stores, SQL exports, certificates, and everything into a single folder and zips it for you. If you back those zips up, you'll have most everything.
Restoring directly back into SQL isn't the recommended method, if you did need to get back up you'd want to follow standard restore procedures by using the supported PowerShell, but you'll have other avenues to restore if needed and a more complete copy
of your data.
The LIS export may be complete if you don't have any Lync locations defined. You'd typically enter these for 911 purposes.
Check out Lasse's Channel 9 video as well:
http://channel9.msdn.com/Events/TechEd/Europe/2014/OFC-B331
Check out his backup series docs here as well:
http://tech.rundtomrundt.com/search/label/Backup-Lync2013
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

HLB for Lync Server 2013 Standard Edition

Hi Guys,
I am planning to add an additional new Lync Central site with paired Lync Server 2013 standard edition in Primary and DR data centers. with 1 or 2 OWAS Servers in each DCs. No Edge
server in this new Lync central site as we already have an Edge pool in another central site for federation. Only IM & P and Conferencing, no External Access, Mobility and EV.
My question is, for LS2013 Standard edition paired pools in the new Lync Central site. should I use HLB or DNS LB should be ok? as technically we do not have any HA here only DR.
Any advantage using HLB over DNS LB in LS2013 Standard edition?
Thanks for your help.
Cheer....

You typically wouldn't need HLB with standard edition at all. What were you planning to accomplish?
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

Lync 2013 standard server for 3000

Planning to deploy Lync 2013 standard server for 3000 users, IM/presence, Audio/video, persistence chat, monitoring/archive. external access required so 1 edge server in DC and 1 in DR. No enterprise voice. DC and DR are corrected with dark fiber
one lync 2013 standard server in DC and 1 in DR. 1 edge server in DC and 1 Edge server in D R.have couple of queries.
1. can i get HA while doing server pairing in DC and DR?
2. how much time will it take for frontend failover if my frontend server is down in DC.
3. how much time will take for external access failover in DC and DR?
4. are there any potential risks if using standard version instead of enterprise?
Basically client need cost effective solution as lync is not critical for him, does not want to use 3 FE servers in DC and 3 FE in DR to achive HA. want to achieve the solution with standard servers.

1) HA typically refers to automatic failover, so not with Standard edition, but you can get manual failover with this with nearly full functionality.
2) Again, this is manual, but once invoked less than 20 minutes I'd think, possibly faster, only testing invoke-failover will tell you for sure but it won't be too bad.
3) This involves a topology change to change the federation route, possibly next hop for the edge, and possibly media path for a front end pool. That can be completed and replicated in under a minute. You may want to point your external simple
URLs and such (lyncdiscover) at the remaining server, this may be a DNS change to point to a separate reverse proxy. Your _sipfederationtls._tcp SRV record can have a lower matching partner as well, but I typically prefer to keep low TTLs on the external
DNS records so they can be changed quickly.
4) Sure, no automatic failover, your scalability is limited without building out new pools later, no SQL backend that can be mirrored for a bit more resiliency. But again, you can manually failover without issue, you just have to be able to tolerate
a short outage.
Technically, you'd only need 1 FE in the DR site. You have to match Ent/Ent or Std/Std in a pool pair, but the number of servers don't need to match. Still, the HLB and SQL requirements can be costly so I understand this.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

Lync Standard Edition Server pairing -- Archiving and monitoring collocated but Single SQL backend

Hi,
I have a scenario where in ---we have Two Standard Edition Servers ( SE1 and SE2) with 1K users each ( Total 2K in one Site) paired to enable High Availability. The Standard Edition Server has archiving and monitoring and mediation server collocated.
For archiving + monitoring database we have a Seperate SQL enterprise edition server.
Quetions:
1. Can we use single SQL Enterprise Edition as backend for (archiving and monitoring ) for both SE1 and SE2 ?
2. If yes, do we need two seperate instances?
3. If not, could you please suggest the best possible solution in such an environment ?
Regards,
Archana Rao

Hi ArchanaVR,
Agree with Michael, and add some more details.
By default, the SQL Server Express back-end database is collocated on the Standard Edition server. You cannot move it to a separate computer. With one exception, you cannot collocate other databases on the Standard Edition server. If you choose to deploy
Persistent Chat Server on a Standard Edition server, you can collocate the Persistent chat database and the Persistent Chat Compliance database on the same Standard Edition server.
You can collocate each of the following databases on a single database server:
Monitoring database
Archiving database
A back-end database for an Enterprise Edition Front End pool
You can collocate any or any or all of these databases in a single SQL instance or use a separate SQL instances for each, with the following limitations:
Each SQL instance can contain only a single back-end database (for an Enterprise Edition Front End pool), single Monitoring database, single Archiving database, single persistent chat database, and single persistent chat compliance database.
The database server cannot support more than one Enterprise Edition Front End pool, one server running Archiving, one server running Monitoring, single Persistent Chat database, and single Persistent Chat compliance database, but it can support one of each,
regardless of whether the databases use the same instance of SQL Server or separate instances of SQL Server.
http://technet.microsoft.com/en-us/library/gg398131.aspx
Best regards,
Eric

Co-location of persistent chat and monitoring databases on Standard Edition server

Hello, I've seen all kinds of different answers to this question around the web with conflicting answers.
We have a basic IM/Presence only install of Lync 2013 and now want to deploy Monitoring and Persistent Chat roles.
As per this blog, it states you can co-locate all of these on one FE server.
http://windowspbx.blogspot.ca/2012/07/aaa-donotpost-install-lync-standard.html
Which does match what this TechNet article states:
http://technet.microsoft.com/en-us/library/gg398131.aspx
However, in the Blog, it says you need to install Full SQL Server 2008 in order to collocate, yet this goes against what TechNet says is possible, in that you can have all databases in one instance:
Each SQL instance can contain only a single back-end database (for an Enterprise Edition Front End pool), single Monitoring database, single Archiving database, single persistent chat database, and single persistent chat compliance database.
I guess my question is, can I simply install Monitoring and Persistent Chat using the same default SQL Server 2012 instance that was installed along with the Front End Standard Edition server (RTC instance)? Or should I create a new instance? Or do I need
to install a new SQL Server 2012 somewhere on a different server altogether?
Thanks!

Hi,
Lync standard edition server has SQL express database by default to host RTC instance. Monitoring server required SQL reporting services, SQL express does not have reporting components part of it. Hence, you required full SQL version for monitoring
and archiving deployment.
Technically, you can install full SQL server on the standard edition server itself. But , it is not recommended in production environment. It's good idea to install SQL server on a dedicated server for hosting monitoring and archiving database.
Thanks
Saleesh
If answer is helpful, please hit the green arrow on the left, or mark as answer. Blog : http://blogs.technet.com/b/saleesh_nv/

Cramming it all into one Standard Edition server

Hello,
I'm rolling out a fresh deployment of Lync Server 2013. Right now the idea is to have one Standard Edition server with about 2500 users homed there that will have the following things collocated:
A/V Conferencing service
Mediation service
Monitoring and Archiving services (will probably use Exchange 2013 for storage)
Persistent Chat server
The two Persistent Chat databases: the PC database and the PC Compliance DB
So, from everything I've read, it's supported to have all that stuff on one Standard Edition server. Is it wise to do that if there are 2500 users? Seems to me like a lot of load, even though all those roles are technically supported.
We're considering having two Standard Edition servers for high availability that would have our 2500 users spread evenly between them. (not a Enterprise FE pool). We should be able to spread out those collocated roles if we had two SE servers,
right?
Thanks for the help,
Brandon

Yes, a Lync Standard edition server will support up to 5,000 users. The only thing to do is to make sure you have sufficiently spec'd your hardware, use the Capacity Planning tool to input the users and traffic to ensure you have sufficient hardware to cope
with the load: http://www.microsoft.com/en-us/download/details.aspx?id=36828
Regarding spreading out co-located roles if you pair two Standard Edition servers; this is not possible. Both servers will have all the roles and you pair them, so that in the event
of failure of one server, you can fail over to the other server. You could home users on either pool to distribute load that way, just make sure that either pool can handle the load of all users should a failure occur and failover is required.
On a side note, if you need external access, Edge services (and Directors, Reverse Proxy, etc) will need their own servers, as will the Office Web App Server if you want to do PowerPoint sharing in Lync meetings
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer" | Blog
www.lynced.com.au | Twitter
@imlynced

Preparing Single Standard Edition Server

Hi,
I keep getting failed caching file error while preparing single standard edition server. The error reads:
Failed cachingfile C:\ProgramData\Microsoft\Lync Server\Deployment\cache\5.0.8308.0\setup\Server.msi
error message: Could not find file 'C:\ProgramData\Microsoft\Lync Server\Deployment\cache\5.0.8308.0\setup\Server.msi'.
Its a test lab environment. Below are the logs
Lync Server 2013 Deployment Log Collapse All Actions
Action   Action Information   Time Logged   Execution Result
▼ BootstrapSqlExpress         Completed with errors
└ ▼ Bootstrapper.Action      8/10/2014 4:49:18 AM   Failed
     └ ▼ Bootstrapper main action      8/10/2014 4:49:18 AM   Failed
         └ ► Validate prerequisites for bootstrapper      8/10/2014 4:49:18 AM   Success
             └ ► Install prerequisites      8/10/2014 4:49:18 AM   Success
                 └    Name of prerequisite: WMIEnabled   8/10/2014 4:49:18 AM
                 └    Type of prerequisite: block   8/10/2014 4:49:18 AM
                 └    Method used to check prerequisite state: !IsWMIEnabled()   8/10/2014 4:49:18 AM
                 └    Result of state check: False   8/10/2014 4:49:18 AM
             └ ► Install prerequisites      8/10/2014 4:49:18 AM   Success
                 └    Name of prerequisite: NoBootstrapperOnBranchOfficeAppliance   8/10/2014 4:49:18 AM
                 └    Type of prerequisite: block   8/10/2014 4:49:18 AM
                 └    Method used to check prerequisite state: IsBranchOfficeAppliance()   8/10/2014 4:49:18 AM
                 └    Result of state check: False   8/10/2014 4:49:18 AM
             └ ► Install prerequisites      8/10/2014 4:49:18 AM   Success
                 └    Name of prerequisite: SupportedOS   8/10/2014 4:49:18 AM
                 └    Type of prerequisite: block   8/10/2014 4:49:18 AM
                 └    Method used to check prerequisite state: !SupportedOperatingSystem()   8/10/2014 4:49:18 AM
                 └    Result of state check: False   8/10/2014 4:49:18 AM
             └ ► Install prerequisites      8/10/2014 4:49:18 AM   Success
                 └    Name of prerequisite: NoOtherVersionInstalled   8/10/2014 4:49:18 AM
                 └    Type of prerequisite: block   8/10/2014 4:49:18 AM
                 └    Method used to check prerequisite state: !VersionCheck()   8/10/2014 4:49:18 AM
                 └    Result of state check: False   8/10/2014 4:49:18 AM
         └ ▼ Validate the installation cache      8/10/2014 4:49:18 AM   Failed
             └    Error: Failed caching file C:\ProgramData\Microsoft\Lync Server\Deployment\cache\5.0.8308.0\setup\Server.msi, error message: Could not find file 'C:\ProgramData\Microsoft\Lync
Server\Deployment\cache\5.0.8308.0\setup\Server.msi'.
▼ Details
└ Type: BootstrapperException
└ ► Stack Trace
    └   at Microsoft.Rtc.Internal.Tools.Bootstrapper.BootstrapperTask.ValidateCache()
at Microsoft.Rtc.Management.Internal.Utilities.LogWriter.InvokeAndLog(Action action)
└ ► Additional Details
    └   Error: Could not find file 'C:\ProgramData\Microsoft\Lync Server\Deployment\cache\5.0.8308.0\setup\Server.msi'.
► Details
└ Type: FileNotFoundException
└ ► Stack Trace
    └   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.File.InternalCopy(String sourceFileName, String destFileName, Boolean overwrite, Boolean checkHost)
at Microsoft.Rtc.Internal.Tools.Bootstrapper.BootstrapperTask.ValidateCache()
   8/10/2014 4:49:18 AM   Error
DIV5,DIV6,DIV7,DIV8,DIV4,DIV9,DIV3,DIV2,DIV1

Hi,
For the issue of publishing Topology failed, would you please show us more detailed information?
You can refer to several links about fail to publish Lync Topology:
http://weakestlync.com/2013/03/19/lync-2013-enabling-topology-completed-with-errors/
http://terenceluk.blogspot.com/2011/05/publishing-lync-server-2010-standard.html
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there.
Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Lync 2013 standard number of Backends required and pool paring setup?

Hi
I am in the process of putting together a lync 2013 implementation. The plan is to use lync 2013 standard as IM and Presence are the only requirement we have approx. 3000 users
we have two sites
Site A (Primary)
x 2 FE-A1 FE-A2 Lync 2013
x1 BE-A1 Lync 2013
Site B (D.R)
X 2 FE-B1 FE-B2 Lync 2013
X1 BE-B1 Lync 2013
what I want to know is
1. If Site A has two FE servers each will require there own pool if I pair FE-A1 with FE-A2 can I also pair FE-A1 with FE-B1 and the same for 2?
2. Can the servers FE-A1 and FE-A2 use the same BE server or should I be using a separate server for each?
3. In this design I was thinking of using two edge servers 1 at each site that would be published using TMG, would this be correct, this would be for IPhone mobile users to use.
thanks in advance
J

1) If site A has to FE servers, and you go with Standard edition, they would be their own pools. If you wanted HA you could put three enterprise servers together into a single pool and load balance them. If you pair FE-A1 with FE-A2, those
two pools cannot be paired with any other pool. You also can't Pair FE-A1 to FE-A2, then FE-A2 to FE-B1.
2) Your diagram looks like Lync 2013 for the back end, it would actually be SQL, and this would specifically apply if you're using Lync enterprise. If the Lync front end servers are in the same pool, they can use the same backend, if they're not they
need separate back ends.
3) Edge servers would be published with a standard firewall, if TMG is your firewall that would work. If TMG is only being used as a reverse proxy, you would use it to publish your web services on your front end servers. Either way, you'll need
to also publish the web services on your front end servers to the Internet for mobile clients to function.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Update lync 2013 for skype server 2015

good morning
I updated my Lync 2013 standard is
to skype 2015. after restart server
not start front-end server and the
service does not start WindowsFabric.
command(Reset-CsPoolRegistrarState -PoolFqdn "lync2013.vyatsu.ru" -ResetType FullReset)
results in an error
not known version
Fabric
edge server and chat server update good
system log error protocol tls 10 code 36888
certificates reinstall

Hi, S4B, and welcome to the Community,
Please see these FAQ's and information on how to obtain support for the Skype for Business product:
https://support.office.com/en-us/article/Lync-is-now-Skype-for-Business-%e2%80%94-see-what-s-new-aba...
https://support.office.com/home/contact
Office 365 for business
Find answers in the Office 365 community forums
Start your request online
Office 365 admins can submit a service request or contact Support by phone:
Sign in to Office 365 with your Office 365 user ID.
Click Admin > Support.
Need to talk to a person?
Get the admin support phone number.
Contact support
I need more help
If you still have an issue with your Office installation with Office 365 for business, choose a Support resource below.
Best regards,
Elaine

Upgrade BizTalk 2013 Standard Edition to Enterprise edition

Hi All,
I wanted to upgrade from BizTalk 2013 Standard Edition to BizTalk 2013 Enterprise edition. Could you please let me know the steps that I need to follow or the point me to any related documentation.
Thanks and Regards,
Ujjwal
-Ujjwal

Back-up of databases
BizTalk application.
Backup the binding, parties, policies, vocabularies.
BTSNTSVC.config file.
Backup the Enterprise Single Sign-On secret
This would help you if in case of any rollback
When run the installation package for
Enterprise edition, the install will detect
the exiting version and guide you to upgrade. The install will also ensure the
installed BizTalk application is not be affected.
Use the back-ups if anything goes wrong.
If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

Lync 2010 Standard Edition Front-End and Edge Cerificate Renewal issue

Hi Experts,
I have a client with Single Standard Edition FE server and 1 Edge server and both are using PUBLIC certificates. It also has a reverse-proxy server (F5 HLB) with wildcard certificate installed. The FE and Edge certificates are about to expire and the client
now wants the ff.
1. Internal Certificate from Internal CA server for FE
2. External Certificate from Public CA for Edge
What I did was,
A. For Internal Cert - I generated a CSR from MMC cert manager using custom request from the FE server and have it signed by the Internal CA. Reason I did that was, everytime I requested the CSR from Lync Certificate Wizard, it is getting the certificate
template not supported by the Internal CA.
B. For External Cert - I requested the Edge external CSR thru Lync Certicate Wizard and submitted to the client for public CA renewal.
When I installed both certificates, internal lync works fine but anything external (i.e. external lync access, mobile, federation) do not work anymore.
So I decided to roll back the certificates and everything went back to normal?
Question is, what steps or process did i miss or gone wrong? Hope for your response. Thank you in advance.

Hi DaxZilla,
You also need to request a certificate to internal interface of Edge Server from internal enterprise certificate authority.
The certificate for the external edge interface should contain SANs as below:
SAN=Access Edge service FQDN
SAN=Web conference service FQDN
SAN=SIP domain FQDN
Mobile client goes through reverse proxy server to sign in. It is not related with Edge Server. Check the certificate on reverse proxy is not expired.
Best Regards,
Lisa Zheng
Lisa Zheng
TechNet Community Support

Lync 2013 standard edition server disadvantages

Similar Messages

Maybe you are looking for