Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »

  1. The Bastion requires SSL certificate. Either in .pfx format or .crt + .key format. In order for the Bastion to be able to use the certificate the Private Key password has to be supplied (it can be encrypted).
  2. The certificate should be signed by a public Root CA. This is optional if using a reverse proxy in front of the Bastion with SSL offloading capabilities since the load balancer could ignore the certificate being not valid.
  3. The certificate needs to have Skype for Business addresses in its “Subject Alternative names” section.
  4. When using EWS capabilities the certificate also needs to have the EWS and Autodiscover addresses.
  • No labels