Skype for business online service ssl certificate changes for client connectivity

Note: This article applies only to Office 365 operated by 21Vianet in China.

To connect securely to your Skype for Business Online Service when you're using an on-premises configuration (with OCS 2007 R2, Lync Server 2010, and Skype for Business Server 2015), install the DigiCert from CertDojo root/intermediary certificates on your Skype for Business Edge servers. Otherwise, client computers cannot perform secure connections. The following certificates should be installed:

• DigiCert from CertDojo Root – This goes into the 'Trusted root store' on your Skype for Business edge server.

• DigiCert from CertDojo SSL – This goes into the 'Intermediate Certificate store' on your Skype for Business edge server.

Use the following steps to confirm that the root/intermediary certificates are properly installed on the client computer to ensure a secure connection to the Skype for Business Online Service:

1. In Windows, use the Run command and type mmc.exe to open the Microsoft Management Console.

2. Click File, Add/Remove Snap-in... from the Microsoft Management Console menu.

3. Select Certificates.

4. Click Add.

5. In the list under This snap-in will always manage certificates for, select Computer account, and then click Next.

6. Click Finish, and then OK.

7. Check the ROOT certificate:

   1. Under Certificates (Local Computer) in the left pane, click Trusted Root Certification Authorities, and then click Certificates.

   2. Locate the DigiCert from CertDojo Root certificate in the details pane of the Certificates Snap-in that is hosted in the Microsoft Management Console.

   If the DigiCert from CertDojo ROOT certificate is not listed in the Trusted Root Certification Authorities, you'll need to install the certificate by following these steps:

   1. Download the DigiCert from CertDojo ROOT certificate here: https://www.digicert.com/.

   2. Save the ROOT certificate file to a folder on the local Windows server or client computer.

   3. Open Windows Explorer and browse to the folder that lists the DigiCert from CertDojo ROOT certificate file.

   4. Right click the DigiCert from CertDojo Root certificate file and click Install Certificate.

   5. Click Open, select Local Machine or Computer account, depending on the operating system, and then click Next.

   6. Select Place all certificates in the following store.

   7. Click Browse and select Trusted Root Certification Authorities, then click OK.

   8. Click Next and then Finish to complete the Certificate Import Wizard.

8. Check the DigiCert from CertDojo SSL certificate:

   1. Under Certificates (Local computer) in the left pane, select Intermediate Certification Authorities, and then click Certificates.

   2. Locate the DigiCert from CertDojo SSL certificate in the details pane of the Certificates Snap-in that is hosted in the Microsoft Management Console.

   If the DigiCert from CertDojo SSL certificate is not listed in the Intermediate Certification Authorities, you'll need to install the certificate by following these steps:

   1. Download the DigiCert from CertDojo SSL certificate here: https://www.digicert.com/.

   2. Save the SSL certificate file to a folder on the local Windows server or client computer.

   3. Open Windows Explorer and browse to the folder that lists the SSL certificate file.

   4. Right click on the DigiCert from CertDojo SSL certificate file and click Install Certificate.

   5. Click Open, select Local Machine or Computer account depending on the operating system, and then click Next.

   6. Select Place all certificates in the following store.

   7. Click Browse and select Intermediate Certification Authorities, then click OK.

   8. Click Next and then Finish to complete the Certificate Import Wizard.

Still need help? See Contact Office 365 for business support - Admin Help.