Skype Web Components Server Error
Good day all, Been having a strange issue regarding TLS andWeb Components Server Errors since deploying a new single server. There is currently 2 single servers on the topology and moving a user from one FE server to the other seems to not always work, especially if they are coming via the EDGE server. On most login requests we receive the below errors in the even logs: { An unhandled exception was encountered. Service: WebTicketService, exception details: System.ComponentModel.Win32Exception (0x80004005): The client and server cannot communicate, because they do not possess a common algorithm at System.Net.SSPIWrapper.AcquireCredentialsHandle(SSPIInterface SecModule, String package, CredentialUse intent, SecureCredential scc) at System.Net.Security.SecureChannel.AcquireCredentialsHandle(CredentialUse credUsage, SecureCredential& secureCredential) at System.Net.Security.SecureChannel.AcquireClientCredentials(Byte[]& thumbPrint) at System.Net.Security.SecureChannel.GenerateToken(Byte[] input, Int32 offset, Int32 count, Byte[]& output) at System.Net.Security.SecureChannel.NextMessage(Byte[] incoming, Int32 offset, Int32 count) at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult) at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost) at Microsoft.Rtc.Internal.WebServicesAuthFramework.RemoteCertificateResolver.ResolveCertificate(HostAddress hostAddress, Int32 port, ICollection`1 allowedNameList) at Microsoft.Rtc.Internal.WebServicesAuthFramework.WebTicketRemoteSecurityTokenStore.ResolveAndCache(String key, HostAddress hostName, Int32 port, ICollection`1 allowedNameList) at Microsoft.Rtc.Internal.WebServicesAuthFramework.WebTicketRemoteSecurityTokenStore.GetSigningTokenByIssuer(HostAddress hostAddress, Int32 port, ICollection`1 allowedNameList) at Microsoft.Rtc.Internal.WebServicesAuthFramework.WebTicketRemoteSecurityTokenStore.EnsureIssuerSecurityToken(HostAddress machineAddress, Int32 port, ICollection`1 allowedNameList) at Microsoft.Rtc.Internal.WebServicesAuthFramework.WebTicketKeyStore.EnsureIssuerSecurityToken(Uri issuerUri) at Microsoft.Rtc.Internal.WebTicketService.WebTicketService.BeginIssueToken(Message rstMessage, AsyncCallback callback, Object state) at AsyncInvokeBeginBeginIssueToken(Object , Object[] , AsyncCallback , Object ) at System.ServiceModel.Dispatcher.AsyncMethodInvoker.InvokeBegin(Object instance, Object[] inputs, AsyncCallback callback, Object state) at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(MessageRpc& rpc) at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet). Cause: Application error. Please look through the exception details for more information. Resolution: Restart the server. If the problem persists contact product support.} Restart obviously didnt resolve this issue. Checking the system logs, I see the following schannel errors: A fatal error occurred while creating a TLS client credential. The internal error state is 10013. When I checked the TLS settings on the FE (which is where I get all these errors above) withinetcpl.cpl I see that only TLS 1.2 is ticket. Looking at the EDGE server, there is no apparent error that is causing this. We just added the new servers to the SRV and A Record DNS entries, so this shouldnt be an issue. The EDGE has the below schannel errors: An TLS 1.2 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The TLS connection request has failed. Not sure if this could cause any issues though as the working environment has the same errors as the above.
Speed up meeting joins - Application Initialization Module for IIS 7.5
lacking a test environment, I'm curious if anybody has used the Application Initialization Module for IIS on SFB to preload all the apps? Our first joins of the day take quite some time, and this might help. https://www.iis.net/downloads/microsoft/application-initialization I was also told at Ignite that I could increase the settings on the IIS pool so it doesn't garbage collect it so fast. Has anyone else run into longer join times on initial meetings? If so, how did you solve it?Teams Room "Cannot Fetch Calendar"
Good day, I have just finished setting up our Lenovo ThinkSmart Hub500. Creating the room and users account as per MS instructions is all done and Teams Room is logged in. I can start a new meeting and project but no meetings are showing up. At the top it says "Cannot Fetch Calendar". What are we doing wrong? Thanks.
Connecting two standard editions of Skype fo Business 2015
Hello all, I am currently working for company which has just opened up a new branch. During the deployment of the new branches domain it was decided to make it completely separate from our parent domain. Both domain's currently have a standard deployment of Skype for Business 2015. Users are able to communicate within their respective domains but I am trying to have them able to talk across domains. I currently do not know where to start. From what I've seen it might need to deploy a new Edge server but I'm not exactly sure and am looking for some guidance. Any help would be appreciated.
Issue with Skype Business Pro and Outlook 2016 Status Synchronization
Hello, I have the following problem. Skype Business Pro and Outlook 2016 are installed together. Now, when I have a meeting, I am always shown as online in Outlook to others, and not as busy. In Skype, I have already checked all the boxes. I have also compared with other users, everything is 1:1. What else could I do to resolve this issue?Prevent Polycom Phone rolling back to old version - SFB Online.
Noticed that after the firmware update is installed, Polycom phone rolls back to the previous version automatically. I got a message on thePolycom Phone that says "there’s a new update available"it then automatically installs the old version." The IP Phone rolls back to the old version 5.6.0.17325. To prevent the phone from rolling back to the old version, run the following command after logging into SFB Online through PowerShell. Set-CsIPPhonePolicy -EnableDeviceUpdate $False It will take around 20 mins to 1 hr to take effect.External Edge Certificate - Unable to remove auto injected local FQDN SANs when renewing certificate
Hi, I am trying to renew our external Edge certificate but find I am unable to complete the process as during the renewal in the Deployment Wizard I am warned that "FQDNs in your request may contain reserved or special top level domains, and are likely to be rejected if the request is submitted to a public Certificate Authority". I can see two local domain names which are automatically added as Subject Alternative Names during the renewal wizard and I am unable to remove them. I would appreciate any help with resolving this if possible. Regards Nigel
Change User Number to Service Number
In S4B Online, is it possible to convert a user number into a service number? We are working on moving a client to S4B PSTN Calling and since AA isn't available yet, we are going to use Team Call Groups to handle the primary incoming line to the business. When AA is GA, we will want to change that number from a user number to a service number.
Schedule a webinar using Skype for Business 2016
Hello, Here is the scenario, We are trying to schedule a webinar using Skype for Business 2016. Well, I know using "Meet Now" we are able to create a link and send it to registered participant via email to join the conference room, or webinar. However we need a reserved link that do not change and let them know that link beforehand. How' that possible? Thanks
