Thomas.Poett@TEAMS (MVP Teams and Cross-Tenant M&A/D Migration Expert Lead)

Before we start with the Lync 2013 Reverse Proxy solution design and setup guide. I want to keep some supportability statement in mind. By today, the date of writing this blog, Microsoft has to supported solutions. 1. Microsoft TMG (Thread Management Gateway) - if the TMG was purchased before the EOL date. 2. Microsoft IIS ARR (Internet Information Server Application Request Routing) A third solution, the Microsoft Web Application Proxy introduced with Windows Server 2012 R2 is not jet supported. This is due to the reason that WAP has a problem with multiple SIP Domains, meaning here: I cannot handle requests other than for the primary SIP domain, especially the MEET simple URL. The configuration guide here runs through the entire process from the ISS ARR Installation and setup. The guide concentrates on Windows Server 2012 R2. Therefore we need to understand the installation process for IIS ARR first. ARR cannot simply installed by download the MSI package, rathe...

Demystify Lync 2013 Server internal certificate requirements © 27.08.2014, Thomas Pött, Microsoft MVP Lync and PLSL 3 rd level Support certified. Version 1.7 . 2 The technical level of this document is 400. This article requires knowledge about certificate authorities, TLS encryption and identity authorization. Lync relay on several external components, as network or certificate authority, especially the CA is an important component for TLS encryption. We need to understand how Lync make use of certificates for authentication, identity authorization and encryption. It also makes differences between Lync service and its related web service, which are even segregated into internal and external site. Note: This document is neither a sizing nor a configuration guide. You should use this document only for your environment planning’s purposes and security considerations. In lager environments you should spend some time to evaluate the optimal path of your certificate deploy...