Hi,

please find the below error

Error " windows could not start the Lync Server Access Edge on Local computer. For more information, review the system Event Log. IF this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code-2146762495.

Regards

Lakshminarayana

Hi

Must be the day for Edge services not starting. Another thread here: https://social.technet.microsoft.com/Forums/en-US/1ce3d530-25b1-4313-abba-d67f5db73e8f/lync-services-are-not-getting-start?forum=ocscertificates could you try the suggested steps in there to save me re writing them?

thanks

Hi,

I have checked in logs

You will need to renew your internal  and external edge certificate then. Once renewed, replace and run the deployment wizard > assign certificates, choose your new certificate to apply to your internal and external edge service and then start the services.

Hi,

I have renewal certificate and download from Godaddy. and opened Lync server 2010 deployment wizard and run in assign certificate wizard--> import certificate but its show status is missing.

Thanks

Laks

Hi

So if you run Get-CsCertificate on your edge server, do you see any service that has the old certificates assigned?

Specifically the AV Authentication and DataEdgeExternal?

perhaps run this command

Set-CsCertificate -Type AudioVideoAuthentication, DataEdgeExternal -Thumbprint <thumbprint of new go daddy cert>

and also

Set-CsCertificate -Type Internal -Thumbprint <thumbprint of new internal certificate>

thanks

Hi,

I have run the Get-Certificate cmd, I got below info.

PS C:\Users\Administrator> Get-CsCertificate
Internal: Assigned certificate not found or untrusted
AccessEdgeExternal: Assigned certificate not found or untrusted
DataEdgeExternal: Assigned certificate not found or untrusted
AudioVideoAuthentication: Assigned certificate not found or untrusted
WARNING: Get-CsCertificate encountered errors. Consult the log file for a
detailed analysis, and ensure all errors (4) and warnings (0) are addressed
before continuing.
WARNING: Detailed results can be found at
"C:\Users\Administrator\AppData\Local\Temp\2\Get-CsCertificate-3c3eea71-e4f0-40
ee-a929-7d39c93f39a0.html".

and run the Set-CSCertificate cmd, it says path is missing,

could you please send me more details.

Thanks

Laks

OK

so it looks like the certificates have not been applied to the edge server and as such missing.

The Set-CsCertificate command doesn't require a path parameter just the usage type and thumbprint

To get the thumbprint of the cert

Get-Childitem -path "cert:\LocalMachine\My" | fl

Copy the correct thumbprint should be a long string of numbers and characters

Also make sure that you have the latest and up to date root & intermediate certificates installed to the trusted root and intermediate stores for GoDaddy and your internal CA

then run the commands above. Once applied, run the Get-CsCertificate command again to make sure the errors have disappeared

thanks

Hi,

total I got 5 thumbprint

please see the below error for all of 5.

PS C:\Users\Administrator> Set-CsCertificate -Type AudioVideoAuthentication, Dat
aEdgeExternal -Thumbprint 974F962CE5E0AB512ED21A0164429B690F8CDBF4
WARNING: Set-CsCertificate failed.
WARNING: Detailed results can be found at
"C:\Users\Administrator\AppData\Local\Temp\2\Set-CsCertificate-74be17f3-4605-42
3b-8a2a-b8a33ea31747.html".
Set-CsCertificate : Command execution failed:
"974F962CE5E0AB512ED21A0164429B690F8CDBF4" not found in MY certificate store
or not trusted. To enable trust, install the root certificate in the Trusted
Certification Authorities store.
At line:1 char:1
+ Set-CsCertificate -Type AudioVideoAuthentication, DataEdgeExternal
-Thumbprint 9 ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~
    + CategoryInfo          : InvalidOperation: (:) [Set-CsCertificate], Deplo
   ymentException
    + FullyQualifiedErrorId : ProcessingFailed,Microsoft.Rtc.Management.Deploy
   ment.SetCertificateCmdlet

Hi

So as per my previous posts please ensure you have the root and intermediates installed into the trusted root and intermediate stores on the local machine store for GoDaddy and your internal CA.

then repeat the commands with the correct thumbprint of the correct certificate. You don't need to apply all 5, use only the valid one from the certificate you have renewed. Look at the expiry dates to confirm the correct thumbprint to use

thanks

Hi,

In Godaddy before downloading certificate I have selected server type is IIS.

is it fine or select other one.

Thanks

Laks

IIS type is fine, but this is your server certificate. I am talking about the intermediate and root certificate from GoDaddy that completes the certificate chain of trust.

Maybe these links will help

https://uk.godaddy.com/help/what-is-an-intermediate-certificate-868 (same applies for the root cert)

Repository here:

https://certs.godaddy.com/repository

without either the root or the intermediates, your cert will not be valid in the eyes of Lync.

thanks