{"id":57,"date":"2013-01-02T14:12:00","date_gmt":"2013-01-02T14:12:00","guid":{"rendered":"\/post\/2013\/01\/02\/Lync-phone-unable-to-sign-in-after-windows-update-on-Lync-Server.aspx"},"modified":"2013-01-02T14:12:00","modified_gmt":"2013-01-02T14:12:00","slug":"lync-phone-unable-to-sign-in-after-windows-update-on-lync-server","status":"publish","type":"post","link":"https:\/\/www.vatland.no\/index.php\/lync-phone-unable-to-sign-in-after-windows-update-on-lync-server\/","title":{"rendered":"Lync phone unable to sign in after windows update on Lync Server."},"content":{"rendered":"

After update to Root Sertificates ( KB931125) http:\/\/support.microsoft.com\/kb\/931125<\/a> You are constantly getting Warning in the eventlog. Also Lync Phones will be unable to sign in. The error message on the phone is that the “Registrar FQDN could not be resolved”.<\/p>\n

UPDATED<\/span>: On new Phones you will only get a message that login failed when trying to sign-in using extension and PIN.<\/p>\n

On the Lync Frontend server:<\/p>\n

Event Type: Warning
Event Source: Schannel
Event Category: None
Event ID: 36885
Date: date
Time: time
User:
Computer: COMPUTERNAME
Description: When asking for client authentication, this server sends a list of trusted certification authorities to the client. The client uses this list to choose a client certificate that is trusted by the server. Currently, this server trusts so many certification authorities that the list has grown too long. This list has thus been truncated. The administrator of this machine should review the certification authorities trusted for client authentication and remove those that do not really need to be trusted.<\/p>\n

The solution to this is to make the Lync server to not send the trusted root certification authority list.<\/p>\n

 <\/div>\n
Add registry key : (Method 3 :http:\/\/support.microsoft.com\/kb\/2464556<\/a> )<\/div>\n
HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL<\/div>\n

Value name: SendTrustedIssuerList
Value type: REG_DWORD
Value data: 0 (False)<\/p>\n

 <\/p>\n

This will be a problem for all services that requies client certificates thereby it could be a problem is you run NAC. <\/p>\n

Atle<\/p>\n","protected":false},"excerpt":{"rendered":"

After update to Root Sertificates ( KB931125) http:\/\/support.microsoft.com\/kb\/931125 You are constantly getting Warning in the eventlog. Also Lync Phones will be unable to sign in. The error message on the phone is that the “Registrar FQDN could not be resolved”. UPDATED: On new Phones you will only get a message that login failed when trying to … Continue reading Lync phone unable to sign in after windows update on Lync Server.<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[6],"tags":[],"class_list":["post-57","post","type-post","status-publish","format-standard","hentry","category-lync"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_likes_enabled":false,"jetpack-related-posts":[{"id":56,"url":"https:\/\/www.vatland.no\/index.php\/lync-edge-server-stopped-replicating-cms\/","url_meta":{"origin":57,"position":0},"title":"Lync Edge server stopped replicating CMS","author":"Atle","date":"January 3, 2013","format":false,"excerpt":"At some time Lync\u00a0edge server stopped replicating changes\u00a0in configuration. Also a\u00a0\"get-csmanagementstorereplicationstatus\" show False on\u00a0Edge server. Investigation shows\u00a0that the firewall has not changed and you can telnet from frontend to edge on port 4443. Alse got\u00a0the same error\u00a0in systemlog on edge server\u00a0: Description: When asking for client authentication, this server sends\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":559,"url":"https:\/\/www.vatland.no\/index.php\/lync-server-security-fix-kb3080353-causing-problems\/","url_meta":{"origin":57,"position":1},"title":"Lync server security fix KB3080353 causing problems.","author":"Atle","date":"September 22, 2015","format":false,"excerpt":"(UPDATED) After we installed the Latest Lync server 2013 security fix (Security Update for Lync Server 2013 Web Components Server KB3080353) we have had severeal issues where users where unable to sign in to\u00a0 Lync. This was the server complaining about the client certificate , normally it is the client\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"LyncCertError","src":"https:\/\/i0.wp.com\/www.vatland.no\/wp-content\/uploads\/2015\/09\/LyncCertError.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":28,"url":"https:\/\/www.vatland.no\/index.php\/lync-client-will-not-get-past-contacting-server\/","url_meta":{"origin":57,"position":2},"title":"Lync client will not get past “Contacting server….”","author":"Atle","date":"January 6, 2014","format":false,"excerpt":"When you start the Lync Client and won't get past \"Contacting server..\" ,and it never time's out.\u00a0It can be worth checking time on\u00a0client and servers.\u00a0Other users can sign in to Lync, even on the same PC. It will not help removing Lync client certificate, or reset password. Solution here is\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":373,"url":"https:\/\/www.vatland.no\/index.php\/lync-dhcp-options-and-windows-2012-r2\/","url_meta":{"origin":57,"position":3},"title":"Lync DHCP options and Windows 2012 R2","author":"Atle","date":"November 22, 2014","format":false,"excerpt":"Recently had a issue where Lync phones (Polycom CX600) using number and pin\u00a0where unable to download the\u00a0CA\u00a0certificate chain. Tethered phones worked fine.\u00a0Some network packet inspection\u00a0revealed that the DHCP server did not provide any of the options 43 information. The client (phone) asked for the correct vendor class \"MS-UC-Client\", but there\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"Lync2013","src":"https:\/\/i0.wp.com\/www.vatland.no\/wp-content\/uploads\/2014\/05\/Lync2013.gif?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":14,"url":"https:\/\/www.vatland.no\/index.php\/lync-unified-contact-store-ucs\/","url_meta":{"origin":57,"position":4},"title":"Lync Unified Contact Store – UCS","author":"Atle","date":"March 7, 2014","format":false,"excerpt":"How do I check and enable Lync UCS? First of all you need Exchange 2013 , then\u00a0make sure you have enabled UCS in Lync server. By running get-csuserservicesPolicy and verify it has been set to UCSAllowed=TRUE Next check you client policy. Get-CsClientPolicy should show you \"EnableExchangeContactSync = true\" for the\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"USERSP","src":"https:\/\/i0.wp.com\/www.vatland.no\/wp-content\/uploads\/2014\/03\/USERSP-300x71.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":34,"url":"https:\/\/www.vatland.no\/index.php\/lync-2013-mobile-client-and-response-groups\/","url_meta":{"origin":57,"position":5},"title":"Lync 2013 Mobile client and response groups","author":"Atle","date":"October 30, 2013","format":false,"excerpt":"Have a user logged in on his Lync 2013 mobile client . The use is member of a Respnsegroup. When the someone call this responsegroup Lync mobile client is unable to establish a connection. \u00a0I have found several others that also have this problem, and it seem that this is\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/posts\/57","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/comments?post=57"}],"version-history":[{"count":0,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/posts\/57\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/media?parent=57"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/categories?post=57"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/tags?post=57"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}