Forum Discussion

Tommy Bergens's avatar
Tommy Bergens
Copper Contributor
Mar 27, 2019

Problem getting sign-in certificate issued externally with Skype for Business Server 2019

I have a problem getting Skype for Business 2019 installed on Windows Server 2019 to issue the sign-in certificate for TLS-DSK when accessing externally for the first time. If I sign in internally the certificate gets issued without any problem. When I look at the process with clslogger it just seem to stop without any error messages or anything like that.

 

So basically the only way to sign in externally without first having logged in internally is using NTLM. If I would configure Hybrid Modern Auth and set the authentication scenario to MA only externally I would never be able to log in since I never get the certificate issued.

 

Have anybody run in to this issue?

3 Replies

  • Tommy Bergens's avatar
    Tommy Bergens
    Copper Contributor
    Apr 17, 2019

    Hello all

     

    I neglected to mention in my post that I use Web Application Proxy to publish external web services. I figured out that when using WAP you need to disable url translation in request headers as specified in https://url11.mailanyone.net/v1/?m=1hGez3-0002rq-5t&i=57e1b682&c=n2pBEdmdUcj3IBlgCkDL9CNuRWboT5VPZz0Hlkf9sl1P7qSGyvktjZf4Tyq8aCl6-m-CAl80A9af6FdorxBByj6WfNchMJpmcUdxMTVvkPSOKVUxscKYzIilgO73O57jGhV0VlbjhyKcHs1UA0U57y8cARWYfgRaLKYXRv6kZ87H-1-eP-Gsre1wrH9OEA72g5rf-Lk_YE_Ofne3TAXBbxFcmSFWtY0wjhzMdWN18_4XFtTC6b8h6fvYU4kaak-G4-XrKNLF6c9RveWgCeVH8w

     

    After doing that everything works as expected.

     

     

  • Danie_Lategan's avatar
    Danie_Lategan
    Copper Contributor
    Apr 06, 2019

    Tommy Bergens 

    How did you manage to install SFB 2019 on Windows Server 2019? Did you do a standard edition deployment. Also did you do and specific prereqs on the windows 2019 server apart from the windows features needed? In my lab I can only get SFB2019 server to work on a Windows 2016 server and the frontend service just won't start on a windows 2019 server - can you share how you deployed it please?

    • Tommy Bergens's avatar
      Tommy Bergens
      Copper Contributor
      Apr 17, 2019

      Hello Danie_Lategan 

       

      It is a standard edition deployment and I didn't to anything special on the Windows Server 2019 to get it to work, I installed the prereqs specified in https://docs.microsoft.com/en-us/skypeforbusiness/plan/system-requirements. In my lab had to do more to get it to work on Windows Server 2016 like installing .NET 4.7.

       

      Are you running the rtm version or the eval version? I belive the eval version didn't work on Windows Server 2019.