Hello,
I'm trying to deploy a Lync Server (Skype for business) at our business. I have 4 Servers:
Pool: SHCIM01.domain.net
Edge: SHDIM01.domain.net
Reverse Proxy: SHDIM02.domain.net
Office Web Apps: SHCIM02.domain.net
I am able to sign into Lync inside and outisde of my business on Desktops and Laptops with no issues but not mobile devices. On Mobile devices I get "We can't verify the certificate from the server. Please contact your support team".
When I run the Microsoft Connectivity analyzer with auto discover I get all Green Lights. When I run the analyzer on port 5061 I get the following:
"Testing remote connectivity to Microsoft Lync server through the Lync Access Edge server sip.domain.net on port 5061 to verify user jengelhart@domain.net can connect remotely.
Specified remote connectivity test(s) to Microsoft Lync server failed. See details below for specific failure reasons.
Tell me more about this issue and how to resolve it
Additional Details
Couldn't sign in. Error: Error Message: Unable to establish a connection..
Error Type: ConnectionFailureException.
.
Elapsed Time: 100098 ms."
When I run the connectivity Anazlyzer on port 443 I get a warning:
"Analyzing the certificate chains for compatibility problems with versions of Windows.
Potential compatibility problems were identified with some versions of Windows.
Additional Details
The Microsoft Connectivity Analyzer can only validate the certificate chain using the Root Certificate Update functionality from Windows Update. Your certificate may not be trusted on Windows if the "Update Root Certificates" feature isn't enabled.
Elapsed Time: 2 ms."
Does any one have any ideas what could be wrong? Please let me know if I can provide more information for troubleshooting.
Thanks.
_sipinternaltls._tcp.domain.net -> SHCIM01.domain.net
_sipinternal._tcp.domain.net -> sip.domain.net
_sip._tls.domain.net -> sip.domain.net
_sip._tcp.domain.net -> sip.domain.net
sipinternal.domain.net -> sipinternal.domain.net
sip.domain.net -> sip.domain.net
sipexternal.domain.net -> SHDIM01 IP
sip.domain.net -> SHCIM01 IP
meet.domain.net -> SHCIM01 IP
dialin.domain.net -> SHCIM01 IP
admin.domain.net -> SHCIM01 IP
lyncdiscoverinternal.domain.net -> SHCIM01 IP
Lyncdiscover.domain.net -> External IP of Edge
Edge Cert (SHDIM01):
DNS Name=sip.domain.net (Access Edge Service)DNS Name=wc.domain.net (Web Services)
Reverse Proxy Cert (SHDIM02):
DNS Name=SIP.domain.netDNS Name=dialin.domain.net
DNS Name=lyncdiscover.domain.net
DNS Name=meet.domain.net
DNS Name=officewebapps.domain.net
Pool Cert (SHCIM01):
DNS Name=sip.domain.NETDNS Name=SHCIM01.domain.NET
DNS Name=dialin.domain.net
DNS Name=meet.domain.net
DNS Name=skypeadmin.domain.net
DNS Name=LyncdiscoverInternal.domain.NET
DNS Name=Lyncdiscover.domain.NET
- Edited by joengelhart Wednesday, June 17, 2015 2:58 AM