Understanding certificate on an Enterprise Edition Front End Server

OCS Servers talk to each other on MTLS. You need to have certificate configured on the OCS Server to enable MTLS. If you have only one FE server in the domain, you can configure SIP over TCP and you don't need a cert on the server.

Each client will also need to trust the certificate that the server is using in order to connect to the server by using TLS. You can use the Certificates Wizard on an Enterprise Edition Server to do the following:

·         Request, create, and assign a new Web certificate with enhanced key usage for server authentication.

·         Assign an existing certificate.

Required fields on the Certificate

Subject name should match the Pool FQDN and Server FQDN should be listed in Subject Alternate Name (SAN) ( See How to Check)

Enhanced Key Usage should have "Server Authentication" ( See How to Check)

Step by step to configure a certificate on an Enterprise Edition Front End Server

Create and Assign a certificate to the OCS Server (EE) if you have an internal CA

Create and Assign a certificate to the OCS Server (EE) from a public CA

Create the certificate

Import the certificate

Assign the Certificate