Installing certificate on Lync server WS 2008R2 standard

Hi,
I'm new to all this. Can someone please help. We are on a domain and recently our Certificate for Lync expired, so now "Lync" is not functioning. We also have an edge server. I know it has expired because I see it in the event viewer. So the
first question, How do I renew the certificate for Lync, I can't find it on the server. Once I get that information, Do I install the certificate on the Lync server or the Edge server? thank you for helping a newbie!

Both of those servers (front end and edge) need certificates, you might also want to check for a certificate on a reverse proxy as well (if you ping meet.yoursipdomain.com externally, whatever server that IP NATs to). You request them using
the deployment wizard, clicking "Install or Update Lync Server System" then re-running step 3. Once you have your certificate assigned, you'd need to restart services. Here's a link that walks through it:
http://uclobby.com/2013/09/16/renewing-lync-server-20102013-certificates/
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Similar Messages

Installing certificate on ACS Server

i want to install the certificate in acs server, I have taken the option generate certificate signed request. configured all parameters like install ACS certificate, authority setup and trust list. the certificate has been generated and installed on the machine. But when i try to login to system it is working normally with http only. how can i change it to https. please anyone help me.

Hi,
To Enable HTTPS for ACS :
Goto Administration Control -- Access Policy -- SSL Setup -- Use HTTPS Transport
To Create & Install a Server Certificate:
System Configuration -- ACS Certificate Setup -- Generate Self Signed Certificate -- Fill in the details -- Select- Install Generated Certificate
Restart ACS Services under Service Control
When you try to log into the ACS you would get a warning -- Select Yes
Tnx,
somishra

Lync 2010 Certificate Issue - "There was a problem verifying your certificate from the server"

Greetings.
My Issue:
Lync 2010 client does not connect to server;error displayed "Cannot sign into Lync. There was a problem verifying the certificate from the server."
Description:
The client is running on my Windows 7 box, and my CA server is a Windows Server 2003 box. I have installed the hotfix on the Server 2003 box to update the Web Enrollment portion of CA to allow for newer clients (Vista and 7) to receive certificates from
this server.
Lync server is running on Server 2008 R2 STD, installation was a success.
The Windows 7 box is a part of the domain.
I have manually exported the Root CA from my Enterprise CA server from
Trusted Root Certification Authorities -> Certificates and imported into the same location on my Windows 7 box.
If I look at the certification path on the Root CA, on my Windows 7 box, it says "The certificate is OK." The same goes for the servers involved.
Still nothing.
I have read the other forum posts on here about people having success once they manually import the Root CA from the Enterprise CA server, but this is not my case here.
All certificates are successfully assigned on the Lync server box; however, I did have to manually import the Root CA into Lync server's
Trusted Root Certification Authorities -> Certificates before I could successfully assign them. Had to do this on another deployment I completed, so I didn't think anything of it.
To recap: it seems that even with my Root CA imported into my Windows 7 box I can still not connect to my Lync server with the client, and I get the error message "There was a problem verifying the certificate from the server."

Solved
Solution : Export certificate from Lync Server Start > Administrative Tools > IIS > Server Certificate > Export > abc.pfx save it, Copy and place the certificate where Ms Lync 2010 client is installed or getting certificate
error. Follow these steps on client machine to install certificate
Run > mmc > add or remove snap in > certificates > computer account > local computer >finish > ok > expand Certificate > Trusted Root Certification Authorities > Certificate > All task > Import > copy abc.pfx certificate
and delete unnecessary certificate from there.
Restart Client machine and open microsoft Lync client 2010 and open option menu > Personal > Advanced > choose Auto Configuration > save ok

MS Lync Server 2013 Standard

I am installing Lync 2013 Server Standard with SQL Express, when i get to Setup or Remove Lync Server Component, I have the error bellow.
About Executing PowerShell command: Install-CSDatabase -Confirm:$false -Verbose -LocalDatabases -Report "C:\Users\administrator.DCKNG\AppData\Local\Temp\1\Install-CSDatabase-[2014_01_26][12_36_06].html"
I encounter the error below:
An error occurred while applying SQL script for the feature RtcDatabaseStore. For details, see the log file 'C:\Users\administrator.DCKNG\AppData\Local\Temp\1\Create-RtcDatabaseStore-MSLync.dckng.local_rtclocal-[2014_01_26][12_36_09].log'
An error occurred while applying SQL script for the feature LyssStore. For details, see the log file 'C:\Users\administrator.DCKNG\AppData\Local\Temp\1\Create-LyssStore-MSLync.dckng.local_lynclocal-[2014_01_26][12_36_15].log'
An error occurred while applying SQL script for the feature LyssStore. For details, see the log file 'C:\Users\administrator.DCKNG\AppData\Local\Temp\1\Create-LyssStore-MSLync.dckng.local_lynclocal-[2014_01_26][12_36_15].log'
Kindly help. I need a very fast response.
Emmanuel

Find bellow the error on the lo. I want to install or update Lync Server System.
Kindly help
Error: An error occurred while applying SQL script for the feature RtcDatabaseStore. For details, see the log file 'C:\Users\administrator.DCKNG\AppData\Local\Temp\1\Create-RtcDatabaseStore-MSLync.dckng.local_rtclocal-[2014_01_26][13_44_06].log'
An error occurred while applying SQL script for the feature LyssStore. For details, see the log file 'C:\Users\administrator.DCKNG\AppData\Local\Temp\1\Create-LyssStore-MSLync.dckng.local_lynclocal-[2014_01_26][13_44_12].log' An error occurred while applying
SQL script for the feature LyssStore. For details, see the log file 'C:\Users\administrator.DCKNG\AppData\Local\Temp\1\Create-LyssStore-MSLync.dckng.local_lynclocal-[2014_01_26][13_44_12].log'
Emmanuel

Installing Certificate on SunOneweb6.1 server

i am trying to install a server certificate but unfortunatly i dont see the certificate at the Security TAB under Managed Certificates:
here is the command that i am running to import the certificae to the
server instance database:
pk12util -i www.ggg.com.pk12 -d /opt/iplanet/servers/alias/ -P https-test
please advice
thanks in advanced

Both of those servers (front end and edge) need certificates, you might also want to check for a certificate on a reverse proxy as well (if you ping meet.yoursipdomain.com externally, whatever server that IP NATs to). You request them using
the deployment wizard, clicking "Install or Update Lync Server System" then re-running step 3. Once you have your certificate assigned, you'd need to restart services. Here's a link that walks through it:
http://uclobby.com/2013/09/16/renewing-lync-server-20102013-certificates/
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Please help me resolve the Lync server 2013 deployment error: "An error occurred while applying SQL script for the feature BackendStore."

I am getting an error in "Step 2 - Setup or Remove Lync Server Components" of "Install or Update Lync Server System" step.
"An error occured while applying SQL script for the feature BackendStore. For details, see the log file...."
Additionally, all previous steps such as: Prepare Active Directory, Prepare first Standard Edition server, Install Administrative Tools, Create and publish topology are done without any errors. The user that I used to setup the Lync server is member of:
Administrators
CSAdministrator
Domain Admins
Domain Users
Enterprise Admins
Group Policy Creator Owners
RTCComponentUniversalServices
RTCHSUniversalServices
RTCUniversalConfigReplicator
RTCUniversalServerAdmins
Schema Admins
I have tried to re-install all the things and started to setup a new one many times but the same error still occurred. Please see the log below and give me any ideas/solutions to tackle this problem.
****Creating DbSetupInstance for 'Microsoft.Rtc.Common.Data.BlobStore'****
Initializing DbSetupBase
Parsing parameters...
Found Parameter: SqlServer Value lync.lctbu.com\rtc.
Found Parameter: SqlFilePath Value C:\Program Files\Common Files\Microsoft Lync Server 2013\DbSetup.
Found Parameter: Publisheracct Value LCTBU\RTCHSUniversalServices;RTC Server Local Group;RTC Local Administrators;LCTBU\RTCUniversalServerAdmins.
Found Parameter: Replicatoracct Value LCTBU\RTCHSUniversalServices;RTC Server Local Group.
Found Parameter: Consumeracct Value LCTBU\RTCHSUniversalServices;RTC Server Local Group;RTC Local Read-only Administrators;LCTBU\RTCUniversalReadOnlyAdmins.
Found Parameter: DbPath Value D:\CsData\BackendStore\rtc\DbPath.
Found Parameter: LogPath Value D:\CsData\BackendStore\rtc\LogPath.
Found Parameter: Role Value master.
Trying to connect to Sql Server lync.lctbu.com\rtc. using windows authentication...
Sql version: Major: 11, Minor: 0, Build 2100.
Sql version is acceptable.
Validating parameters...
DbName rtcxds validated.
SqlFilePath C:\Program Files\Common Files\Microsoft Lync Server 2013\DbSetup validated.
DbFileBase rtcxds validated.
DbPath D:\CsData\BackendStore\rtc\DbPath validated.
Effective database Path: \\lync.lctbu.com\D$\CsData\BackendStore\rtc\DbPath.
LogPath D:\CsData\BackendStore\rtc\LogPath validated.
Effective Log Path: \\lync.lctbu.com\D$\CsData\BackendStore\rtc\LogPath.
Checking state for database rtcxds.
Checking state for database rtcxds.
State of database rtcxds is detached.
Attaching database rtcxds from Data Path \\lync.lctbu.com\D$\CsData\BackendStore\rtc\DbPath, Log Path \\lync.lctbu.com\D$\CsData\BackendStore\rtc\LogPath.
The operation failed because of missing file '\\lync.lctbu.com\D$\CsData\BackendStore\rtc\DbPath\rtcxds.mdf'
Attaching database failed because one of the files not found. The database will be created.
State of database rtcxds is DbState_DoesNotExist.
Creating database rtcxds from scratch. Data File Path = D:\CsData\BackendStore\rtc\DbPath, Log File Path= D:\CsData\BackendStore\rtc\LogPath.
Clean installing database rtcxds.
Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding.
****Creating DbSetupInstance for 'Microsoft.Rtc.Common.Data.RtcSharedDatabase'****
Initializing DbSetupBase
Parsing parameters...
Found Parameter: SqlServer Value lync.lctbu.com\rtc.
Found Parameter: SqlFilePath Value C:\Program Files\Common Files\Microsoft Lync Server 2013\DbSetup.
Found Parameter: Serveracct Value LCTBU\RTCHSUniversalServices;RTC Server Local Group.
Found Parameter: DbPath Value D:\CsData\BackendStore\rtc\DbPath.
Found Parameter: LogPath Value D:\CsData\BackendStore\rtc\LogPath.
Trying to connect to Sql Server lync.lctbu.com\rtc. using windows authentication...
Sql version: Major: 11, Minor: 0, Build 2100.
Sql version is acceptable.
Validating parameters...
DbName rtcshared validated.
SqlFilePath C:\Program Files\Common Files\Microsoft Lync Server 2013\DbSetup validated.
DbFileBase rtcshared validated.
DbPath D:\CsData\BackendStore\rtc\DbPath validated.
Effective database Path: \\lync.lctbu.com\D$\CsData\BackendStore\rtc\DbPath.
LogPath D:\CsData\BackendStore\rtc\LogPath validated.
Effective Log Path: \\lync.lctbu.com\D$\CsData\BackendStore\rtc\LogPath.
Checking state for database rtcshared.
Reading database version for database rtcshared.
Database version for database rtcshared - Schema Version5, Sproc Version 0, Update Version 1.
Thanks and Regards,
Thanh Le

Thanks Lạc
Phạm 2
I Had similar issue i end up uninstalling and reinstallting but same issue, then i change the drive but same issue. It was I/O issue. After adjusting my I/O it fix our issue and installation went on without any issue.
If any one using KVM here is detail article
We just give this option cache=‘writeback
using this article http://www.ducea.com/2011/07/06/howto-improve-io-performance-for-kvm-guests/ and http://itscblog.tamu.edu/improve-disk-io-performance-in-kvm/ this fix my issue thanks

Microsoft Lync Server 2013 Control Panel "Navigation to the webpage was canceled"

i'm facing this issue on the last 2 days.My Lync server 2013 was seted up a month ago and everything went fine on the installation.
Lync server 2013 on Windows 2008R2 SP1.
I could login to the Control Panel (using domain administrator credentials), create users (including myself) manage clients etc.
i didn't login to Lync server for at least a week, beacause i didin't have any other user to add. When time came to add a new user to Lync, i got this error whenever i try to open Control Panel.
i didn't change anything during this time, so i'm really confused by this.
i've checked everything from the start and all seem to be in place.
i also can't open the admin page from the local host as i get an error
HTTP error 403.4 - Fobidden.
i tried also to create new certificates for Lync server, but issue remains.
Also, any solutions i've read for this problem doesn't work as everything is placed correct as other users suggest.
Can anyone please help me further?
Cheers,
Elias

Ok I had the same problem, I missconfigured the admin simple url in topology builder (TB) which I fixed. Also the default certificate in the FE server did not have a SAN entry for the "admin" simple url (which was an error).
So I corrected the admin address in TB republised it, redid step two on the FE, reissued adn replaced the old cert. The new cert had the corrected admin simple url. Checked IIS on the server and made sure that the internal web server had the
right certificate, restarted IIS.
The default Lync control pannel still did not come up, I rebooted the server, the closest I got was being prompt for my credential which it did not accept.
Finally control pannel came up with https://localhost/cscp but I got prompted becuase of a certificate missmatch:
but it still worked!!! Very very wierd. I have not changed CA servers. I am interested about why this happened....
[email protected] BK
Bob Krangle

SCOM 2012 R2 Integration with Lync Server 2013

Hi,
I am trying to configure SCOM 2012 R2 to work with Lync server 2013 standard edition. I have successfully installed and tested Lync Server 2013. But the problem is, I never worked on SCOM application before and I can not find any easy documents online. So
could you please help me and suggest any step by step guide for the same purpose!
BR,
Ajit

Hi,
Glad to hear that you have solved the issue. For the second question, what did you want to do with the Windows Server (anything to do with Lync Server)? As it is another question, you can also post another case on Technet forum and more engineers will help
you solve the issue.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Lync server sip trunk , IM and presence forwarded in trunk, is possible?

tank you in advance for all the help i can obtain.
I have managed to install, configure a lync server 2013 evaluation.
One domain controller and one front end server (without Edge Server)
My first goal was to configure a SIp trunk with an Open Source SIP proxy/server. (OpenSIPS)
All work properly, it was many days of suffering and hard work. The call are correcly routed in trunk in both direction.There is some possibility to forward sip message about presence (subscribe,publish, notify) inside the trunk?
Lync manage it internally but when i want to send the message cross domain, a SUBSCRIBE as example(my lync domain is lynclab.local, my OpenSIPS domain is opensips.local) i obtain this error in lync:
"Non-trusted source sent an FQDN/IP that doesn't match a .... The SIP 404 Not Found" (referring my esternal domain Opensips.local.
Probably i have deeply misudestood someting, reading for many days documents and manuals i cannot find a solution.
I need to configure an XMPP Gateway for "exchange" status message between sip domain?
thank you for all, and excuse me if the questions is tryvial or absolutely out of context.

You'll need a trusted application for this, you won't be able to forward the subscribe events through a standard sip trunk sent through the mediation role unfortunately. You'll have to find something specifically written to help the two systems interoperate,
but out of the box this would not be native functionality from the Lync side.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Lync Server 2013 Installation Error

Hello,
I am using my AD in Windows Azure VMs. I created new VM of A3 (4 cores, 7 GB Memory) Windows Server 2012 R2, Port 1433 MSSQL added, made it a member of Domain and planned to install first Lync Server 2013 on it.
In "Setup or Remove Lync Server Components" of "Install or Update Lync Server System", got an Red Coloured text "An error
occurred while applying SQL script for the feature BackendStore."
I have not enabled monitoring and archiving server in topology builder. I added "Network Service" and assign "Full Control" in Security Permissions of "C:\CsData" and "C:\LyncShare".
I executed the SQL Setup Wizard and upgraded any instance to 2012.
Please guide.
Thanks, Divyaprakash Koli

Is the Lync deployment in Azure as well? If so please check this
blog by Guy Bachar. Look for "Houston, we have a problem"
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Lync Sorted blog

Clean up Active Directory after dirty deleted lync server 2013

Hi All,
i have trouble with my lync server, im gonna re-deploy my lync server 2013 after it has deleted without no purpose.
based on my experience if we want to deploy with the same name and configuration like previously. setup with failed because it has already register in adsiedit ?
please tell me how to clean up my AD.
thanks for you assistance guys,
Best Regards,
ari

Hi,
On DC, please run adsiedit and connect to the Configuration naming context.
Browse down to Configuration > Services > RTC Service and then just delete the entire
RTC Service container. Also delete the Computer object(s) for any Lync Server you had previously installed. Then you can install the new Lync Server 2013 with no issue.
Here is a similar case may help you:
https://social.technet.microsoft.com/forums/lync/en-US/2fbbb75c-8e76-4284-9f32-a27e95e30c49/remove-lync-from-ad-for-fresh-deployment
Best Regards,
Eason Huang
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Eason Huang
TechNet Community Support

C:\Program Files\Microsoft Lync Server 2010\Deployment\ directory missing.

Hi Guys,
We were trying to “Install the Mobility Service and autodiscover Service” on lync 2010 frontend server, for which we have downloaded the “McxStandAlone.msi” and placed in
“C:\ProgramData\Microsoft\Lync Server\Deployment\cache\4.0.7577.0\setup” location.
As per the document, to execute this we have to run the bootstrapper.exe from the lync powershell at the following location
“C:\Program Files\Microsoft Lync Server 2010\Deployment\Bootstrapper.exe”
But “Deployment folder and bootstrapper exe” are not present in mentioned location.
So is there any workaround for this ?
Thanks and Regards,
Ankit

Did you happen to install Lync on another drive? Maybe D:?
Also try to run the Lync Deployment Tool and click "Install or Update Lync Server System" and rerun "Setup or Remove Lync Server Components". This should do the same thing as running the bootstrapper.
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
Georg Thomas | Lync MVP
Blog www.lynced.com.au | Twitter
@georgathomas
Lync Edge Port Check (Beta)
This forum post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Lync server interconnection

HI
I installed two servers Lync Server 2010 for two clients (different domain). This last time, the customer signed a partnership contract. they told me to configure two servers for members of both clients can communicate with Lync.
Is it possible to interconnect two lync servers that have a different domain?
if so, have you any idea how can i do?

If you're stating that you have two different Lync environments, in two separate domains / forests, then you have a couple options that immediately come to mind.
Assuming you are retaining the separate AD environments. You can create a federated relationship between the two. This will naturally require the nessecary roles to be in place for external access (Edge and Reverse Proxy) in each Lync environment.
Alternately you will need to investigate Lync operation in a multi-forest environment with an identity management solution as per
http://technet.microsoft.com/en-us/library/gg398173.aspx
Naturally if there's a view to merge the two organisations into a single domain the this negates the above.
Please say if I've interpreted this incorrectly.
Kind regards
Ben

2013 Office365 Lync cleint for 2008R2 RDP server

Hello, we are just starting a long, phased move to Office365...the first part of that migration is to implement Lync. To that end we have about 18 licenses of Lync Plan 2 already implemented with the conventional Lync basic 2013 client for windows,
but 8 of those users will need regular access to Lync on a 2008R2 RDP server/session. That server currently has Office 2013 installed, but I need to add Lync and know that the standard client executable is not applicable/will not install.
Can someone please advise on the necessary process to give these subscription users access on the RDP platform.
Thank you

Hi KenRexroth,
In order to install Office ProPlus 2013 in the Remote Desktop Services (RDS) mode, you must have a volume licensing agreement.
I suggest you Contact Microsoft Customer Support Services to get help. For a complete list of Microsoft Customer Support Services telephone numbers and information, visit the following Microsoft
website:
https://www.microsoft.com/licensing/servicecenter/Help/Contact.aspx
Best regards,
Eric
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Windows Server 2008 R2 Standard "Certificate Authority Service" / Exchange Server 2010 EMC not starting and no AD connectivity for authentication.

Hello,
I am a new IT Manager at this company and need assistance big time. Their environment looks as follows:
Server 1. Domain Controller Server (Windows Server 2008 R2 Standard) running active directory.
Server 2. Email Server (Windows Server 2008 R2 Standard) running Exchange Server 2010 .
* Note. No back ups to work with aside from whats mentioned below.
DC had a virus infection causing a lot of issues on the shared network drives 2 days ago locking up all the files with a crypto ransom virus. Running Avast suppressed the infection. Had to recover the file shares which luckily had a back up.
The issue is that the Exchange Server 2 post this lost connectivity with the AD Server 1. Exchange Server 2 when launching EMC could not launch the console stating the following:
"No Exchange servers are available in any Active Directory sites. You can’t connect to remote
Powershell on a computer that only has the Management Tools role installed."
Shortly after I found that it is possible the EMC launcher was corrupt and needed to be reinstalled following another blog post. I deleted the exchange management console.msc per instructions only to discover I couldnt relaunch it because there was
no way how. So I copied another msc file that happened to be on the DC Server 1 back to Exchange Server 2 and got it to launch again.
Another post said that it might be an issue with the Domain Account for the Computer, so to delete it in the AD Server 1 only to find that rejoining it from Exchange Server 2 using Computer>Properties> Chage Settings > Change is greyed out because
it is using the Certificate Authority Service.
I tried manually re-adding the computer in AD and modeling permissions after another server in group settings but no go. After this I was unable to login to the Exchange Server 2 with domain accounts but only local admin, receiving the following Alert:
"The Trust Relationship between this workstation and primary domain failed."
I tried running the Power Shell tools on Exchange Server 2 to rejoing and to reset passwords for domain accounts as noted in some other blogs but no luck as the Server 2 could not make the connection with Server1 or other errors it kept spitting out.
I also during the investigation found the DNS settings were all altered on both the Server 1 and Server 2 which I luckily was able to change back to original because of inventorying it in the beginning when I started.
I need help figuring out if I need to rejoin the Exchange Server 2 manually by disabling the Certificate Authority Service (or removing the CA as listed here:
https://social.technet.microsoft.com/Forums/exchange/en-US/fb23deab-0a12-410d-946c-517d5aea7fae/windows-server-2008-r2-with-certificate-authority-service-to-rejoin-domain?forum=winserversecurity
and getting exchange server to launch again. (Mind you I am relatively fresh to server managing) Please help E-Mail has been down for a whole day now!
Marty

I recommend that you open a ticket with Microsoft Support before you break things more.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Installing certificate on Lync server WS 2008R2 standard

Similar Messages

Maybe you are looking for