SBM powered by Microsoft Lync Administrator's Guide 2010-11

2-44
Complete the Setup Wizard
Install Server Certificates
Troubleshooting. If you see an error message that mentions a lack of a
“Trusted Root Certificate,” follow the steps in “Import the Certificate Chain”
on page 2-32.
You can also talk to your data center contact and verify that the password for
the private key is correct.
Assign an Existing Certificate
If the SBM already has a certificate installed on it, you can use it.
Caution Do not use the self-signed installed at factory default. The certificate must
meet these requirements:
 It includes a private key—If it does not, you will not receive an error
message, but your phone calls will fail.
 The private key is marked as exportable—Otherwise, the Media Gateway
will not be able to use the certificate and will fail to start.
 The SBM’s FQDN is the CN portion of the certificate’s subject name and
an alternate subject name—Otherwise, the Lync Server Front-End Server
will fail to start or start and stop immediately.
 The certificate is signed by a CA that is trusted in your domain.
1. In the Install Lync Certificates page, select Import Your Own Certificate.
2. Select the Select Certificate from SBM Local Store option.