This guide offers quick instructions on how to generate a CSR code and install an SSL certificate on Skype for Business (formerly Microsoft Lync). Split into four sections, the tutorial contains CSR generation and SSL installation guidelines. The third section includes a brief history of Skype for Business, while the last part features useful tips on where to buy an SSL certificate for Skype for Business.

Please note that Microsoft recommends using UCC certificates as it’s often necessary to secure multiple subdomains for different machines. If you’ve already applied for your SSL Certificate and received it from your CA, feel free to skip part one and jump straight to the installation steps.

Generate the CSR on Skype for Business

Before generating the CSR, it’s necessary to indicate the service or services you wish to encrypt. You have to do this with the Type argument from the CSR generation command.

Generally, you can use the Default type.

The Default, AccessEdgeExternal, and DataEdgeExternal types are for Edge servers, while the WebServicesExternal and WebServicesInternal types are for web streams.

Here is a list of the most common arguments:

  • AccessEdgeExternal
  • AudioVideoAuthentication
  • DataEdgeExternal
  • Default
  • External
  • Internal
  • iPhoneAPNService
  • iPadAPNService
  • MPNService
  • PICWebService (Skype for Business Online only)
  • ProvisionService (Skype for Business Online only)
  • WebServicesExternal
  • WebServicesInternal
  • WsFedTokenTransfer

To generate the CSR you can use the Request-CSCertificate command. Run it in the powershell:

Request-CsCertificate -New -Type YOUR_TYPES -Organization “Your Organization” -OU “IT” -Country US -State “Arizona”  -City “Phoenix” -FriendlyName “Skype SSL” -KeySize 2048 -DomainName “yourdomain.tld” -PrivateKeyExportable $True -Output C:\yourdomain.tld.csr

You’ll need to replace YOUR_TYPES with the services you want to encrypt, and the rest of the examples with your contact information. –PrivateKeyExportable $True makes your private key exportable. If you prefer a graphical interface, another way to generate the CSR code is via an external tool such as our CSR Generator. You’ll receive the certificate and private key files in your email.

Install the SSL certificate on Skype for Business

After your CA sends the necessary files to your inbox, download the ZIP folder and extract its contents on your device. Skype for Business requires SSL files to be in PKCS#7 (.p7b) or PKCS#12 (.p12 or .pfx) formats. 

If you receive your cert in another format such as PEM for instance, you can convert it via OpenSSL or an external conversion tool. For more information, check our guide on SSL certificate formats.

You should know what particular service you want to encrypt using the -Type argument. For more information on services, check Microsoft’s documentation.

To import a PKCS#12 (.p12 or. pfx) file, enter the following command in your Skype for Business server powershell, replacing the path: 

Import-CsCertificate -Path “c:\your_certificate.pfx” -PrivateKeyExportable $True

Locate your SSL certificate

First, you need to identify your SSL certificate via the Get-CSCertificate cmdlet and then sort the results with the Where-Object cmdlet.

Enter the following command to list all available certificates:


To find your particular certificate enter the following.

Get-CsCertificate | Where-Object {$_.Subject -eq “CN=yourdomain.tld”}

Enable your SSL Certificate

To enable the certificate for default and web services roles run the following command:

Set-CsCertificate -Type WebServicesExternal -Thumbprint “B142918E463981A76503828BB1278391B716280987B”

If your search command returned just one result, you can enable the certificate via the following command:

Get-CsCertificate | Where-Object {$_.Subject -eq “CN=domaine.tld”} | Set-CsCertificate -Type Default, WebServicesInternal, WebServicesExternal

That’s it. For more information, please refer to Microsoft’s official documentation here and here.

You can scan your newly installed SSL certificate for potential errors with the help of these handy SSL tools.

Skype for Business History

Skype for Business (formerly Microsoft Lync and Office Communicator) is an enterprise instant messaging software developed by Microsoft as part of the Microsoft Office suite. It comes with the on-premises Skype for Business Server, and software as a service version offered as part of Office 365. 

Microsoft launched Office Communicator (OCS) 2007  on July 28, 2007. In November 2010, the platform was renamed Lync. In May 2013, Microsoft announced that it would allow Lync users to communicate with Skype, a popular instant messaging platform it had acquired in 2011.

Microsoft renamed Lync to Skype for Business in 2015. On September 22, 2015, Skype for Business 2016 was released alongside Office 2016. Later that year, on October 27, 2016, Microsoft released Skype for Business for Mac users.

Skype for Business Versions

  • Skype for Business 2019
  • Skype for Business 2016
  • Skype for Business 2015
  • Lync 2013
  • Lync 2010
  • OCS 2007 R2
  • OCS 2007

Where to buy the best SSL certificate for Skype for Business?

SSL dragon is your one-stop place for all your SSL needs. We offer the lowest prices on the market for the entire range of our SSL products. We’ve partnered with the best SSL brands in the industry to offer you high-end SSL security and dedicated support. All our SSL certificates are compatible with Skype for Business. Here are the SSL certificate types you can buy from us:

To help you select the perfect SSL certificate, we created a couple of handy SSL tools. Our SSL Wizard can recommend the best SSL deal for your online project, while the Certificate Filter, can help you sort and compare different certificates.

If you find any inaccuracies, or you have details to add to these SSL installation instructions, please feel free to send us your feedback at [email protected] Your input would be greatly appreciated! Thank you.