Hi,
You may use wild card certficate (recommended) as it supports internal and external access requirements for a single domain. For example, *.contoso.com certificate supports the externally accessed domains org1.contoso.com and org2.contoso.com
as well as the internally accessed domain internalcrm.contoso.com. Because the external domain name must resolve for internal access, you cannot use the server name for internal access. If you wish, you can use separate Microsoft Dynamics CRM Server 2011 servers
for internal and external claims access to allow the server name to be used for internal access.
You may also use Internal Certicate authority which is recommended only for testing purposes. If you use a , it must be imported into the Trusted Root Certification Authorities store of all Microsoft Dynamics CRM Server 2011 servers and client
computers accessing Microsoft Dynamics CRM Server 2011.
For certficate seleciton further queries you may also refer:
http://technet.microsoft.com/en-us/library/gg188582.aspx
I would suggest you to reffer the followung links for proper step by step configuraiton guide:
http://blogs.msdn.com/b/crm/archive/2011/01/13/configuring-ifd-with-microsoft-dynamics-crm-2011.aspx
http://www.youtube.com/watch?v=T9jZIxDTsBw
http://dynamics-crm2011.blogspot.com/2011/05/crm-2011-adfs-20-federating-with-adfs.html
http://www.dynamics-crm-2011.de/dynamicscrm2011-anwender/crm2011-integratoren/crm-deployment/adfs-and-crm-2011
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=9886ab96-3571-420f-83ad-246899482fb4&displaylang=en
http://www.dynamics-crm-2011.de/dynamicscrm2011-anwender/crm2011-integratoren/crm-deployment/adfs-and-crm-2011
Jehanzeb Javeed
http://worldofdynamics.blogspot.com
Linked-In Profile |CodePlex
Profile
If you find this post helpful then please "Vote as Helpful" and "Mark As Answer".
