I have added a second Exchange 2013 server into my environment,  I set up a DAG.  Data is replicating and you are able to log into either server.

I have associated the UMdialplan with the new server.

Every time I attempt to set the certificate for the UM service, it fails.  I get the error that it is currently in TCP and needs to be set to Dual or TLS.   It is set to dual, I have even restarted the server since that change was made.

Anyone have any guesses?

Thanks, 

Rogan

Are both the UM Call Router and UM Service startup modes set to dual?  If this is a combined CAS/MBX there are two settings to flip.

Only one was,   Which makes me feel really stupid.  As I have gone through this entire process before. 

Thanks Anthony, You the man!

Don't feel stupid... I've done the exact same thing, which is how I know the answer :)