Our SharePoint is running over http and there has been a push to get it to run over https. Some of the guides I've looked at mention that self signed certificates should not be used in production. These guides also show setting up sharepoint over https for external sites. Is it still bad practice to use a self signed certificate if your sharepoint farm is internal only?


1 Answer 1


Self-signed certificates should never be used in production. They have no form of "trust", which is what certificates indicate. I could create a self-signed certificate for sharepoint.company.com, and if I were able to high jack the company.com domain, no one would be to the wiser. This is why a certificate signed by a trusted public Certificate Authority is so critical.

You could always look into Let's Encrypt should cost be of a concern.

  • I think that also answers my other question which was to issue a certificate from the DC.
    – MickB
    Commented May 18, 2017 at 22:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.