{"id":559,"date":"2015-09-22T06:58:08","date_gmt":"2015-09-22T05:58:08","guid":{"rendered":"http:\/\/www.vatland.no\/?p=559"},"modified":"2015-10-03T15:59:08","modified_gmt":"2015-10-03T14:59:08","slug":"lync-server-security-fix-kb3080353-causing-problems","status":"publish","type":"post","link":"https:\/\/www.vatland.no\/index.php\/lync-server-security-fix-kb3080353-causing-problems\/","title":{"rendered":"Lync server security fix KB3080353 causing problems."},"content":{"rendered":"

(UPDATED<\/span>) After we installed the Latest Lync server 2013 security fix (Security Update for Lync Server 2013 Web Components Server KB3080353) we have had severeal issues where users where unable to sign in to\u00a0 Lync. This was the server complaining about the client certificate , normally it is the client complaining about the server certificate.<\/p>\n

\"LyncCertError\"<\/a><\/p>\n

Particulary users homed on VDI or Citrix \/RDS and also some CommonareaPhones where affected. Inspecting the client log from a user login revealed :<\/p>\n

Error:
\nThere was an error communicating with the endpoint at ‘https:\/\/lyncserver.domain.local\/WebTicket\/WebTicketService.svc\/mex’.
\nThe server returned HTTP status code ‘500 (0x1F
\n09\/18\/2015|11:34:46.551 46A8:461C INFO\u00a0 :: CUccPlatform::WriteStreamToLog:
\n09\/18\/2015|11:34:46.551 46A8:461C INFO\u00a0 :: 4)’ with text ‘Internal Server Error’.
\nThe server was unable to process the request.<\/p>\n

<\/p>\n

This looked likt it had something to do with the webserver part of lync. This is why we consentrated on the KB3080353 update.<\/p>\n

The solutions for the affedted user was to either click on the the clear my login info :\"deletesignin\"<\/a><\/p>\n

Or delete the file containing the client cert from:<\/p>\n

%appdata%\\microsoft\\Crypto\\RSA\\S-1-5-21-…….:<\/p>\n

\"UserKey\"<\/a><\/p>\n

For a global fix we had to uninstall this update and reboot the server. All of the affected server was Lync server standard edition.<\/p>\n

Update:<\/span><\/strong><\/em><\/p>\n

Had one server where a uninstall failed. Solution for this was to download latest Lync server 2013 CU and apply that. Once that was done all seems fine\u00a0, except we now had on issue where IOS products would fail to connect. Error message was the they had to get the newest Lync 2013 client even if they was running latest. Turned out this was a bug :<\/p>\n

“You can’t sign in with this version of Lync. Please install a newer version. If that doesn’t work, contact your support team.”<\/p>\n

“You can’t sign in with this version of Lync” error in Lync for iPad or Lync for iPhone on iOS 9. When I testet this bug was affecting more than IOS9, even older versions failed.<\/p>\n

https:\/\/support.microsoft.com\/en-us\/kb\/3096704<\/a><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

(UPDATED) After we installed the Latest Lync server 2013 security fix (Security Update for Lync Server 2013 Web Components Server KB3080353) we have had severeal issues where users where unable to sign in to\u00a0 Lync. This was the server complaining about the client certificate , normally it is the client complaining about the server certificate. … Continue reading Lync server security fix KB3080353 causing problems.<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"#Lync server security fix #KB3080353 causing problems.","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[6,12,42],"tags":[],"class_list":["post-559","post","type-post","status-publish","format-standard","hentry","category-lync","category-lync-client","category-s4b"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_likes_enabled":false,"jetpack-related-posts":[{"id":28,"url":"https:\/\/www.vatland.no\/index.php\/lync-client-will-not-get-past-contacting-server\/","url_meta":{"origin":559,"position":0},"title":"Lync client will not get past “Contacting server….”","author":"Atle","date":"January 6, 2014","format":false,"excerpt":"When you start the Lync Client and won't get past \"Contacting server..\" ,and it never time's out.\u00a0It can be worth checking time on\u00a0client and servers.\u00a0Other users can sign in to Lync, even on the same PC. It will not help removing Lync client certificate, or reset password. Solution here is\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":57,"url":"https:\/\/www.vatland.no\/index.php\/lync-phone-unable-to-sign-in-after-windows-update-on-lync-server\/","url_meta":{"origin":559,"position":1},"title":"Lync phone unable to sign in after windows update on Lync Server.","author":"Atle","date":"January 2, 2013","format":false,"excerpt":"After update to Root Sertificates ( KB931125) http:\/\/support.microsoft.com\/kb\/931125\u00a0You are constantly getting Warning in the eventlog. Also Lync Phones will be unable to sign in. The error message on the phone is that the \"Registrar FQDN could not be resolved\". UPDATED: On new Phones you will only get a message that\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":56,"url":"https:\/\/www.vatland.no\/index.php\/lync-edge-server-stopped-replicating-cms\/","url_meta":{"origin":559,"position":2},"title":"Lync Edge server stopped replicating CMS","author":"Atle","date":"January 3, 2013","format":false,"excerpt":"At some time Lync\u00a0edge server stopped replicating changes\u00a0in configuration. Also a\u00a0\"get-csmanagementstorereplicationstatus\" show False on\u00a0Edge server. Investigation shows\u00a0that the firewall has not changed and you can telnet from frontend to edge on port 4443. Alse got\u00a0the same error\u00a0in systemlog on edge server\u00a0: Description: When asking for client authentication, this server sends\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":13,"url":"https:\/\/www.vatland.no\/index.php\/lync-client-will-not-show-contact-photos-when-external\/","url_meta":{"origin":559,"position":3},"title":"Lync client will not show contact photos when external.","author":"Atle","date":"March 13, 2014","format":false,"excerpt":"Installed Lync 2013 on a Windows 2012R2 server. When I login with an external Lync\u00a0Client there are no photos of internal users. A\u00a0validation shows that the thumbnailPhoto attribute has bin populated with images\u00a0of the correct size.If the\u00a0client Connect directly to the frontend server\u00a0photos are presented correctly.An examination of the Lync\u00a0Addressbook\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":373,"url":"https:\/\/www.vatland.no\/index.php\/lync-dhcp-options-and-windows-2012-r2\/","url_meta":{"origin":559,"position":4},"title":"Lync DHCP options and Windows 2012 R2","author":"Atle","date":"November 22, 2014","format":false,"excerpt":"Recently had a issue where Lync phones (Polycom CX600) using number and pin\u00a0where unable to download the\u00a0CA\u00a0certificate chain. Tethered phones worked fine.\u00a0Some network packet inspection\u00a0revealed that the DHCP server did not provide any of the options 43 information. The client (phone) asked for the correct vendor class \"MS-UC-Client\", but there\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"Lync2013","src":"https:\/\/i0.wp.com\/www.vatland.no\/wp-content\/uploads\/2014\/05\/Lync2013.gif?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":277,"url":"https:\/\/www.vatland.no\/index.php\/lync-server-2010-rtchost-exe-crashes-after-windows-update\/","url_meta":{"origin":559,"position":5},"title":"Lync server 2010 rtchost.exe crashes after Windows Update.","author":"Atle","date":"September 11, 2014","format":false,"excerpt":"\u00a0After running Windows update on a Lync 2010 edge server\u00a0I was unable to communicate with external contacts. I could see their presence but no\u00a0chat\/video or audio.\u00a0The eventlog contained lots of event 1001 \"Information\"(Why\u00a0not error\u00a0!!!!!) that RTCHOST.EXE crashed. Probably failed installation of KB2982385. Why are these only information events. Even more\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"Lync2013","src":"https:\/\/i0.wp.com\/www.vatland.no\/wp-content\/uploads\/2014\/05\/Lync2013.gif?resize=350%2C200","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/posts\/559","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/comments?post=559"}],"version-history":[{"count":7,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/posts\/559\/revisions"}],"predecessor-version":[{"id":570,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/posts\/559\/revisions\/570"}],"wp:attachment":[{"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/media?parent=559"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/categories?post=559"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/tags?post=559"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}