Understanding certificate on an Access Edge Server

you need to have two certificates configured on the Access Edge Server. One for the internal interface, other for the external interface.

Required fields on the Internal Interface Certificate

Subject name should match the Access Edge Server FQDN

Enhanced Key Usage should have "Server Authentication"

Required fields on the External Interface Certificate

Subject name should match the External Name of the Access Edge Server

Enhanced Key Usage should have "Server Authentication"

If you are using the Access Edge server for PIC, you should have "Server authentication" and "Client Authentication" both as EKU.

Step by step to configure a certificate for the Internal Interface of the Access Edge Server

Create and Assign a certificate to the internal interface if you have an internal CA

Create and Assign a certificate to the internal interface from a public CA

Create the certificate

Import the certificate

Assign the Certificate

Step by step to configure a certificate for the External Interface of the Access Edge Server

Create and Assign a certificate to the external interface if you have an internal CA (Its not recommended to use the internal CA to create a cert for the external interface as you would always need to import the root CA before the external clients can connect to the Edge Server)

Create and Assign a certificate to the external interface from a public CA

Create the certificate

Import the certificate

Assign the Certificate