To generate a CSR (Certificate Signing Request) for Lync 2010, you will need to follow these steps:
Start > All Programs > Microsoft Lync Server 2010 > Lync Server Deployment Wizard
Select Install or Update Lync Server System
Click Run button on step 3 Request, Install or Assign Certificates
Select External Edge Certificate and click Request button
On certificate request window click next
Make sure the selection option is on Prepare the request now, but send it later. Click Next.
Give the name and place the location where you want to save your certificate signing request file. E.g.: c:\csr.txt
Click Next button on Specify Alternate Certificate Template window.
On Name and Security Settings window, enter your Friendly Name. e.g.: My Edge Server and make sure the bit length is 2048. Click Next to continue.
On Organization information window, type in your Organization and Organization Unit then click Next
On Geographical Information, please enter your Country, State and City. Click next to continue.
On Subject Name/Subject Alternate Name window, all the subject alternate names will auto populate. Click next to continue.
On SIP Domain Setting on Subject Alternate Names window, make sure the check box on sip domain being checked. Click next to continue.
On Configure Additional Subject Alternate Names window, you can add any additional SAN if needed and click next to continue
On Certificate Request Summary, please review and click next to continue.
Click next on the Executing Command window.
Click on the View button to open the CSR file and click Finish button to close the Certificate Request File window. You can also find the file on the allocated folder.
Copy the entries of CSR file and paste it to the online order screen on Entrust website or CMS.
