Hey everyone, I now have no hair on my head from 1) scratching my head and 2) pulling my hair out. Hope someone can enlighten me:

I'm getting two errors I have questions about:

From Office Communicator on client pc, when trying to use TLS across Internet:

"There was a problem verifying the certificate from the server. Please contact your System Administrator." damn. i AM the sys admin!!!

The other message is when I'm running LCSDiag from the Access Proxy to the LCS Server:
"server certificate SN does not match the server FQDN. Please install on server a proper certificate."

Facts of the case:

I'm currently setting up LCS STANDARD 2005 SP1 on MS Server 2003 servers, I have internal (TCP) connections working fine, but most users here (about 40) are on the road at least part of the time, so I've setup an Access Proxy in order to use TLS for security and PIC.
No federation, as we're a small company and one server will do the job.

So I've purchased a SSL Cert for the Access Proxy, it's installed fine, it looks like. an Entrust Advantage SSL Cert.

Q#1: Do i need to purchase another x.509 certificate, this time for the LCS? I've made the Access Proxy a CA but I don't think it'll help. I also tried to export the Access Proxy's cert (with priv key) to the LCS but that didn't fly, either.

Q#2: the Access Proxy is not on the domain, it's on it's own workgroup as per suggestions. How do I setup a FQDN for an access proxy on it's own local workgroup? I have an external address NAT'ed to the 'public' ip (10.10.1.6) of the Access Proxy, ports 5060, 5061, 443 opened. doesn't work. I had an A Record added (im.companyname.com) to our web provider to resolve to the external address, no good.
I'm wondering if my "problem verifying cert from the server" issue is related to this.

Q#3: If the Access Proxy has a certificate from Entrust.com, can I use that for clent machines and/or the LCS? exporting the keys, maybe?

I'll totally admit that SSL Certs are new to me. But I'm stumped as I usually can learn and configure at same time, but not this time.

thanks,

-G.