Article ID: 929395 - Last Review: January 20, 2012 - Revision: 9.0

Unified Communications certificate partners

View products that this article applies to.

System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

INTRODUCTION

So that you can get secure client access from the Internet to Microsoft Exchange Server, Microsoft works with public X.509 certification authorities (CAs) to make sure that you can obtain the certificates that you need to use the Domain Security feature.

Microsoft also works with CAs to make sure that you can get the certificates that you need to use Microsoft Office Communications Server.

Back to the top

MORE INFORMATION

Many public certification authorities have created Exchange-specific websites that provide relevant documentation about their service. The documentation that is provided includes steps to complete the following tasks:

To complete the certificate enrollment process
To deploy the Domain Security feature
To enable secure client access from the Internet

The following table includes the name and the website for the certification authorities that issue Unified Communications certificates for Microsoft Exchange and for Communications Server.

Collapse this tableExpand this table

Certification authority	Website
Entrust	http://www.entrust.net/microsoft/ (http://www.entrust.net/microsoft/)
Comodo	http://www.comodo.com/msexchange (http://www.comodo.com/msexchange)
DigiCert	http://www.digicert.com/unified-communications-ssl-tls.htm (http://www.digicert.com/unified-communications-ssl-tls.htm)
GlobalSign	http://www.globalsign.com/ssl/buy-ssl-certificates/unified-communications-ssl/ (http://www.globalsign.com/ssl/buy-ssl-certificates/unified-communications-ssl/)
WISeKey	http://www.wisekey.com/en/Products/digital-identities/Pages/ssl-solutions.aspx (http://www.wisekey.com/en/Products/digital-identities/Pages/ssl-solutions.aspx)
GeoTrust	http://www.geotrust.com/ssl/ssl-certificates-san-uc/ (http://www.geotrust.com/ssl/ssl-certificates-san-uc/)
Thawte	http://www.thawte.com/ssl/san-uc-ssl-certificates/index.html (http://www.thawte.com/ssl/san-uc-ssl-certificates/index.html)
VeriSign	http://www.verisign.com/ssl/buy-ssl-certificates/specialized-ssl-certificates/san-ssl-certificates/index.html (http://www.verisign.com/ssl/buy-ssl-certificates/specialized-ssl-certificates/san-ssl-certificates/index.html)

Note Public X.509 certification authorities who want to be added to this list and Exchange customers who want to provide feedback about the documentation that is provided on the X.509 certification authority websites can contact Microsoft at the following email address:

uccertfb@microsoft.com

For more information about the SAN attribute and certificates, visit the following Microsoft websites:

http://msexchangeteam.com/archive/2007/04/30/438249.aspx (http://msexchangeteam.com/archive/2007/04/30/438249.aspx)
http://msexchangeteam.com/archive/2007/07/02/445698.aspx (http://msexchangeteam.com/archive/2007/07/02/445698.aspx)

For more information about how to generate and to install a certificate by using SAN entries, visit the following Exchange 2007 wiki website:

http://exchangeninjas.com/cascert (http://exchangeninjas.com/cascert)

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

Back to the top

Obtaining Unified Communications certificates for Microsoft Exchange

For more information about how to use the Exchange Management Shell to create a certificate request file that contains a certificate request in PKCS#10 format, visit the following Web sites:

http://technet.microsoft.com/en-us/library/aa995942.aspx (http://technet.microsoft.com/en-us/library/aa995942.aspx)
http://technet.microsoft.com/en-us/library/aa998327.aspx (http://technet.microsoft.com/en-us/library/aa998327.aspx)

Back to the top

How to obtain Unified Communications certificates for Communications Server

Generate certificate signing requests (CSRs) by using the Communications Server Certificate Wizard.

Note This wizard is available when you install Communications Server.
Submit the CSR that you generated to the certification authority at the websites that are mentioned previously in this article.
After you get the certificate and save the certificate file to your computer, use the same Communications Server Certificate Wizard to install the certificate.

If you want to know more about the Communications Server Certificate Wizard and about how to install certificates for Communications Server, consult the deployment documentation that is available on the Communications Server Technical Library at the following URL:

http://technet.microsoft.com/en-us/library/bb676082.aspx (http://technet.microsoft.com/en-us/library/bb676082.aspx)

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

Back to the top