We try to install Lync 2010. our AD is company.local. the CA too in the same domain.

the users try to login using SMTP account as company.com when we install a CA certificate with company.local as well an external certificate xxx.company.com on the FE server we cannot start any FE services as the FE server on comapny .local domain.

How we resolve.

Hi,

What is your sip domain ? Is it company.local or company.com ?

Do you want associate user@company.com as user's SIP URI ? If so, you need company.com as primary sip domain or additional sip domain in Lync topology. Also, make sure that company.com is part of FE certificate SAN. I hope , you have a DNS zone for company.com for autodiscovery and simple URLs.

Thanks

Saleesh

After you deploy Lync Server, you need to enable users for Lync.

http://technet.microsoft.com/en-us/library/gg413092(v=ocs.14).aspx

Hi,

Assuming a standard deployment, following can be used as a reference for the certificates subject names and SAN names required from your internal CA and assigned to the Lync services. This can be generated as part of the Lync deployment process. But before that, please make sure that the sip domain is correctly set to company.com as Saleesh said.

For Front End server - (sip.company.com is a Static A record which points to the FE server)

Subject Name:
sip.COMPANY.com

SAN Names:
sip.COMPANY.com
lsweb.COMPANY.com
lync.COMPANY.com
Front_End.company.local
lyncdiscoverinternal.COMPANY.com
COMPANY.com.

since your internal domain is company.local, you might have to create a pin-point DNS zones as mentioned here http://technet.microsoft.com/en-us/library/gg398758.aspx

Hope that helps.