Hi gysh1,
Are you able to open up Internet Explorer and navigate to https://lyncdiscover.<domain> on the device and does it come back with a certificate error?
Also are you able to check to make sure you have the latest version of MTR application as there were two windows updates that were released that breaks the on-premise Skype for Business signin.
https://support.microsoft.com/en-us/help/4571709/windows-10-update-kb4571709
and
https://support.microsoft.com/en-us/help/4565351/windows-10-update-kb4565351
The latest application works around the issues caused by these updates.
If you do get errors when navigating to lyncdiscoverinternal.<domain> from within IE on the device, the root certificates are not installed correctly.
For this, you can export them from a working machine, from within Chrome, you click on the padlock, click on Certificate, then click on the certification path tab, select the topmost certificate in the list and click on View Certificate button, click on details and then copy to file.
This is the file you need to import into the devices trusted root certificate store, you may need to also do the same for the subtree of certificates in the step listed above and import those into the intermediate certificate store.
Thanks,
Dan