Not supported by SBC SWe Lite in this release.

When Preparing for SBA Deployment - First Steps, the Branch Site Tasks requires to Generate and Import an SBA Certificate. If you do not wish to send the signing request automatically to a Windows Certificate Authority, and would rather send it to a Trusted CA of your choice, then you'll need to import the signed certificate manually as outlined on this page.

Importing a Signed SBA Certificate

There are two types of certificates that can be imported:

  • X.509 Signed Certificate
  • PKCS12 Certificate and Key

Before importing a new Signed Server Certificate, you must first import a valid Trusted CA Certificate.

If your node has a SHA-2 256 signed server certificate, the SBC will not interoperate with Lync 2010 or earlier OCS/Lync versions. The signature algorithm ( sha256WithRSAEncryption ) is shown in the Certificate panel of the Ribbon SBC Certificate page in the UI.

SHA2-256 Certificate Compatibility

SHA2-256 CA Certificates may be used for the SBA, SBC, and Lync 2013 Servers. Lync 2010 requires that all devices employ ALL SHA1 Certificates. For more information see the Microsoft SHA1 Deprecation Policy.

Import X.509 Signed Certificate

  1. In the WebUI, click the Tasks tab.

  2. In the left navigation pane, under Skype™ for Business Survivable Branch, click SBA Certificate.

  3. Click the Import/Export Certificate tab.

  4. From the Action drop down list, select Import X.509 Signed Certificate.

    Import X.509 Signed Certificate

                                                                                                                              

  5. Paste the Base 64 format signed certificate.
  6. Click OK.

Import PKCS12 Certificate and Key

Before you begin: This operation requires that you paste in a Base 64 format Signed Certificate.

  1. In the WebUI, click the Tasks tab.

  2. In the left navigation pane, under Skype™ for Business Survivable Branch, click SBA Certificate.

  3. Click the Import/Export Certificate tab.

  4. From the Action drop down list, select Import PKCS12 Certificate and Key.

    Import PKCS12 Certificate and Key

  5. In the Password field, enter the same password you created to export the certificate. See Exporting an SBA Certificate.

  6. Click Browse and select the desired PKCS12 file and key. 

    You must use the same password as you used to export the certificate and key. See Exporting an SBA Certificate.

  7. Click OK.