SSL Certificate - No public Biztalk

Question

Hello !!
I've been working with Biztalk since 2006 version, always doing some AS2, encryption and so on. It's the first time a customer requires to use a GoDaddy, Symantec, etc. SSL (in the past always self-signed ssl).
My question is simple:  This biztalk server is not public, won't use a URL, just plain IP.  The guys at GoDaddy or Symantec does not understand what I'm asking for, they just keep asking what's the URL of the website.
Can you give me any directions on how to work with this scenario? How do I request the SSL certificates for encryption and signing?
Thank you!
Victor

Answer 1

You will have a problem with that which you might not be able to overcome.
The names on the certificate used for TSL/SSL must match the host names used in the url either directly or by wildcard.
However, no public vendor will sell you a total wildcard certificate and probably no public vendor will sell you an IP address based certificate because a particular address, 10.4.5.6 for example, can be used many, many times on different networks. 
If you actually own that public address space, maybe, but it's unlikely you do.
You have two realistic options:
Assign the BizTalk endpoint a name in a DNS namespace you own and buy a certificate for that.  You don't actually have to register the host name, the clients can use a hosts file or equivalent.
Continue to use self-issued certificates.
One question, of the BizTalk Server is not public, how is the customer accessing it?  I don't need to know how, but it's an unusual request to require a public cert for an internal service.