Lync SSL certificates (One SAN for Edge and Frontend?)

Question

I'm in the process of generating public SSL certificates for our enterprise Lync environment. We are running a pool of frontend servers, edge servers, mediation servers, and director servers.
My question is can I generate one UCC SAN with like 10 domains and use them for all the servers that need it or will I have to have one SAN for like the Edge servers, one SAN for the front-end servers, and one for the director servers?

Answer 1

You can use one big certificate, but you may want a different subject name for different roles (specifically between the edge and front end)  Many third party cert authorities will allow you to reissue another copy of the cert to do this as long
the names inside the cert don't change.
For the front end, you'll want the common name (or subject name) to be the pool name:
http://technet.microsoft.com/en-us/library/gg398094.aspx
For the edge, you'll want the access edge name as the subject name.
http://technet.microsoft.com/en-us/library/gg398920.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications