Lync phone device sign in failed

Hi. I have an environment of Lync 2010.
Front End Pool - 1 server
Director pool - 2 servers
AV pool - 2 servers
My DNS system is split brain. Local domain company.net, external domain company.com
DNS pinpoint zones:
lyncpool01.company.net pointed to Lync FE server IP address
_sipinternaltls._tcp.company.com SRV 0 0 5061 pointed to sip.company.com
sip.company.com pointed to Lync FE server IP address.
dialin.company.com pointed to Lync FE server IP address
meet.company.com pointed to Lync FE server IP address
ucupdates-r2.company.com pointed to Lync FE server IP address
_ntp._udp.company.com SRV 0 0 123 pointed to my DC (WIN2K8R2)
=================================================
DHCP options
I tried to point option 120 and 43 to FE and Director pool, but no result.
All 6 options of DHCP successfully deployed:
==============================================================================
The result of Test-CsPhoneBootStrap
VERBOSE: Target server fqdn AND web service URL provided by user.
'STActivity' activity started.
Trying to download a certificate chain from web service.
Web Service url :
http://lyncpool01.company.net/CertProv/CertProvisioningService.svc
Certificate chain downloaded successfully.
'STActivity' activity completed in '0,0185095' secs.
'STActivity' activity started.
Trying to get web ticket.
Web Service url :
https://lyncpool01.company.net:443/WebTicket/WebTicketService.svc
Using PIN auth with Phone\Ext : 1010 Pin : 180291
GetWebTicketActivity completed.
'STActivity' activity completed in '0,1102579' secs.
'STActivity' activity started.
Starting ResolveUser activity using Web Ticket.
Web Service url :
https://lyncpool01.company.net:443/CertProv/CertProvisioningService.svc
Found user : sip:[email protected]
Setting sip uri 'sip:[email protected]' back to parent workflow.
ResolveUser activity completed.
'STActivity' activity completed in '0,0988848' secs.
'STActivity' activity started.
Trying to get web ticket.
Web Service url :
https://lyncpool01.copmany.net:443/WebTicket/WebTicketService.svc
Using PIN auth with Phone\Ext : 1010 Pin : 180291
GetWebTicketActivity completed.
'STActivity' activity completed in '0,1038949' secs.
'STActivity' activity started.
Trying to download a CS certificate for User :
[email protected] endpoint :
STEpid
Web Service url :
https://lyncpool01.company.net:443/CertProv/CertProvisioningService.svc
GetCSCertificate activity completed.
'STActivity' activity completed in '0,4309389' secs.
'Register' activity started.
Sending Registration request:
 Target Fqdn      = lyncpool01.company.net
 User Sip Address = sip:[email protected]
 Registrar Port = No Port is provided..
Auth Type 'Certificate' is selected.
Registration Request hit against LC2K10EES.company.net
'Register' activity completed in '0,0913775' secs.
Starting cleanup...
cleanup successful.
'UnRegisterActivity' activity started.
'UnRegisterActivity' activity completed in '0,0049845' secs.
Workflow
'Microsoft.Rtc.SyntheticTransactions.Workflows.STPhoneBootstrapWorkflow',
succeded.
VERBOSE: Workflow Instance Id d80e2d02-5e25-47dd-9927-ec8809c19089, completed.
VERBOSE: Workflow Execution Time (sec): 0.9030903
===========================================================================
The result of Test-CsClientAuth
VERBOSE: Target web service url not provided. Will have to extract it from auth
 challenge.
'STActivity' activity started.
Starting STS Uri Discovery...
Found sts-uri :
https://lyncpool01.company.net:443/CertProv/CertProvisioningService.svc.
STS Uri Discovery activity completed successfully.
'STActivity' activity completed in '0,0141103' secs.
'STActivity' activity started.
Trying to get web ticket.
Web Service url :
https://lyncpool01.company.net:443/WebTicket/WebTicketService.svc
Using NTLM\Kerb auth.
GetWebTicketActivity completed.
'STActivity' activity completed in '0,0556596' secs.
'STActivity' activity started.
Trying to download a CS certificate for User :
[email protected] endpoint :
STEpid
Web Service url :
https://lyncpool01.company.net:443/CertProv/CertProvisioningService.svc
GetCSCertificate activity completed.
'STActivity' activity completed in '0,5940291' secs.
'Register' activity started.
Sending Registration request:
 Target Fqdn      = lyncpool01.company.net
 User Sip Address = sip:[email protected]
 Registrar Port = No Port is provided..
Auth Type 'Certificate' is selected.
Registration Request hit against LC2K10EES.company.net
'Register' activity completed in '0,0951852' secs.
'UnRegisterActivity' activity started.
'UnRegisterActivity' activity completed in '0,0046577' secs.
Starting cleanup...
cleanup successful.
Workflow 'Microsoft.Rtc.SyntheticTransactions.Workflows.STClientAuthWorkflow',
succeded.
VERBOSE: Workflow Instance Id 5419b6d7-ff06-4244-9dba-708d61978e88, completed.
VERBOSE: Workflow Execution Time (sec): 0.8020802
===========================================================
Configuration information of Lync 2010 Client
==============================================================================
The result of Get-CsWebServiceConfiguration
PS C:\Users\raliyev> Get-CsWebServiceConfiguration
Identity                             : Global
TrustedCACerts                       : {}
MaxGroupSizeToExpand                 : 100
EnableGroupExpansion                 : True
UseWindowsAuth                       : Negotiate
UseCertificateAuth                   : True
UsePinAuth                           : True
AllowAnonymousAccessToLWAConference  : True
EnableCertChainDownload              : True
InferCertChainFromSSL                : True
CASigningKeyLength                   : 2048
MaxCSRKeySize                        : 16384
MinCSRKeySize                        : 1024
MaxValidityPeriodHours               : 8760
MinValidityPeriodHours               : 8
DefaultValidityPeriodHours           : 4320
MACResolverUrl                       :
SecondaryLocationSourceUrl           :
ShowJoinUsingLegacyClientLink        : True
ShowDownloadCommunicatorAttendeeLink : True
=====================================================
The result of Get-CsProxyConfiguration
Identity                           : Global
Realm                              : Microsoft.Rtc.Management.WritableConfig.Se
                                     ttings.SipProxy.UseDefault
MaxClientMessageBodySizeKb         : 128
MaxServerMessageBodySizeKb         : 5000
TreatAllClientsAsRemote            : False
OutgoingTlsCount                   : 4
DnsCacheRecordCount                : 30000
EnableWhiteSpaceKeepAlive          : True
UseKerberosForClientToProxyAuth    : False
UseNtlmForClientToProxyAuth        : True
DisableNtlmFor2010AndLaterClients  : False
UseCertificateForClientToProxyAuth : True
AcceptClientCompression            : True
MaxClientCompressionCount          : 15000
AcceptServerCompression            : True
MaxServerCompressionCount          : 1024
RequestServerCompression           : True
===========================================================
Lync logging tool is not showing any usefull information.
I cheked for logs: CertProvisioning, S4, Sipstack and WebInfrastructure.
====================================================
Finally can't catch the problem.
RFT

OK, that is very telling as USB tethering has very few requirements and in most environments works rought out of the box.
Here the main things to check:
Is the Lync User's Telephony setting set to Enterprise Voice?  This is a requirement to use Lync Phone Edition (the
Line URI does not need to be populated).
Time Server issues can also prevent sign-in.  If a Time Server is not provided via DHCP or DNS SRV then the phone will fallback to connecting to
time.windows.com, so if the phone does not have Internet access or NTP traffic is blocked at a firewall, then this could be your problem as well.
Obvious, but worth pointing out: make sure the phone is connected to Ethernet and receiving a basic DHCP lease (IP, subnet, gateway, DNS, etc).  USB tethering does not work unless the device is also connected to Ethernet.
Follow the steps in this article to at least get USB tethering working
http://blog.schertz.name/2010/12/externally-provisioning-lync-phone-edition-3
Then you can move on to PIN authentication:
http://blog.schertz.name/2010/12/configuring-lync-server-for-phone-edition-devices
Jeff Schertz | Microsoft Solutions Architect - Polycom | Lync MVP

Similar Messages

  • When Lync phone device do not sign-in...

    When you have pure Lync common area phone - using LAN not USB - its sign-in fails to the "Internal error". On the IIS's logs I can see the following lines:
    2013-11-14 01:08:41 10.19.71.47 POST /WebTicket/WebTicketService.svc/mex - 443 - 10.11.12.13 OCPhone/4.0.7577.4372+(Microsoft+Lync+Phone+Edition) 200 0 0 56
    2013-11-14 01:08:42 10.19.71.47 POST /WebTicket/WebTicketService.svc/pin - 443 - 10.11.12.13 OCPhone/4.0.7577.4372+(Microsoft+Lync+Phone+Edition) 401 0 0 14
    2013-11-14 01:08:58 10.19.71.47 POST /WebTicket/WebTicketService.svc/pin - 443 - 10.11.12.13 OCPhone/4.0.7577.4372+(Microsoft+Lync+Phone+Edition) 500 0 0 15016
    Do you have a good idea from where to look this 500 HTTP error?
    .-Petri-.
    Petri

    Hi,
    Have you checked the phone received a valid DHCP lease on the network after running cmdlets?
    Please check SRV records as Lync phone cannot utilize manual configuration.
    Make sure the sign in user has been Enterprise Voice enabled.
    Please double check the steps configuring common area phone:
    More details:
    http://blog.schertz.name/2011/04/common-area-phone-configuration-in-lync/
    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make
    sure that you completely understand the risk before retrieving any suggestions from the above link.
    Best Regards,
    Eason Huang
    Eason Huang
    TechNet Community Support

  • Lync Phone Edition - Registrar FQDN cannot be found

    Hi,
    I have finally got Lync phone edition devices into a separate VLAN.  All working ok, except when logging in they pause for about 5-10 seconds with error "Registrar FQDN cannot be found".  They then sign in and work perfectly.  Option
    120 is setup on DHCP and was working fine when they were in the same VLAN as the server.  I am using an IP Helper to allow the phones to get their DHCP settings for our DHCP server.
    Our Lync Servers (FE and Edge Internal interface) are in VLAN 10 with subnet 192.168.10.0/24.
    Our DHCP is yet to be moved into our server VLAN and is currently in VLAN 0 10.81.108.0/22.
    Our Lync Phone devices are in VLAN 20 192.168.20.0/24.
    When I run DHCPUtil.exe -emulateclient on another computer in the 10.81.108.0/22 subnet, I get the following result:
    Result: Success
    DHCP Server : 10.81.108.11
    SIP Server FQDN :
    Certificate Provisioning Service URL :
    https://SR-LC-01.OPG.INTERNAL:443/CertProv/CertProvisioningService.svc
    It doesn't appear to be receiving the option 120 information from our DHCP server.  But this is setup as follows:
    The other DHCP options required for the phones are being pulled down successfully, but this one appears to be failing.  Please help!
    Many Thanks,
    Andrew

    I have had a similar issue in the past and it turned out to be the IP Helper, managed to narrow it down by running DHCPUtil in the same VLAN as the phones. Then tried a phone in the same VLAN as the servers.  That isolated it for me before.
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
    Lync Sorted blog

  • CX Lync Phone Edition defaults to ringtone 5 at Sign in

    Hello,
    I posted this on the Polycom forum initially but they pointed me over to this forum so I'm hoping somebody can help with the following scenario.
    When signing onto a CX600 Lync Phone Edition phone during 'Desk Phone Setup' I select a different ringtone (ringtone 4) than the default (ringtone 5).  When I sign out and back in again it doesn't remember the previously selected ringtone and goes back
    to the default.
    Is this expected behaviour or should it remember the previously configured ringtone?  It  remembers the previously set Time Zone, Date Format and Time Format but not the ringtone.
    The handsets are running with the January 2014 update for Lync Phone Edition on Lync 2013.
    Any assistance would be very much appreciated

    Hi Mike,
    This appears to be expected behaviour for Lync Phone Edition devices. I can repeat your experience at will on an Aastra 6725ip LPE device. All other settings appear to be retained on sign out / in with the exception of the ringtone which as you eluded to
    defaults back to ring tone 5.
    I have tested this in both USB tethered and non-tethered scenarios - same behaviour each time.
    I have an HP here with LPE also, but I suspect the behaviour will be identical to the Polycom and Aastra devices.
    Kind regards
    Ben

  • When I try to send email from phone I get message net sign in failed and the messages won't send

    Why do I get the message net sign in failed when I try to send email from my phone? This just started about a week ago and I am unable to send email.

        Hello yinz!
    Let's get those emails sending! When you get the message, does the device prompt you to sign in to your email? If so, does it give you a different error message? The same? What type of email is it? Are you able to send/receive if using the PC? One option is to uninstall, then reinstall the email account from your device. Please give that a try and keep me posted on the results.
    Thanks so much,
    ChristinaB_VZW
    VZW Support
    Follow us on Twitter @VZWSupport

  • Lync phone edition does not try to sign in after the front end server restarts

    A restart of the frontend server. None of our Lync Phone Edition CX600 and CX3000 phones will sign back in. If you hit the cancel button and click it will work. This was fixed in a previous CU update but seems to be back again. CX version 4.0.7577.4451.
    Any ideas to try. Cant always restart our switches.

    Hi,
    Please install the update KB3014910 in the link below:
    http://support.microsoft.com/en-hk/kb/3014910
    The Update resolves the issue: Lync Phone Edition cannot automatically sign in when the primary front-end server that you register is shut down.
    If the issue persists, please also try to reset the IP phone and test again.
    Best Regards,
    Eason Huang
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Eason Huang
    TechNet Community Support

  • Random Lync Phone Edition Disconnections - Sometimes does not sign back in

    We recently had a user who reported that his Lync Phone (Polycom CX600) was signed out when he came in first thing in the morning and it was sitting at a sign-in error page.  The phone then was having problems signing in.  We had to factory reset
    the phone is order for it to get reconnected. 
    After the user complained once again about a week later that he found he phone signed out, I had the local tech take a look at the phone.  She tells me it was then signed in.  Now i'm baffled.  The phone was signed out earlier but then decided
    to sign itself back in and was working just fine.  One thing else to note, we replaced the phone with a brand new one and still had the same issues.
    I checked the DBAnalyze logs with snooper and found several errors that concerned me.  Here is one of the errors I found:
    Error Time
    : 4/15/2013 10:46:19 PM
    Call Id
    : abcdef
    From Tag
    : def
    To Tag
    : abc
    Error Code
    : 0
    Ms-diagnostic Id
    : 52074
    Request Type
    : SIGNIN
    Content Type
    : application/xml
    Error Diagnostic Header
    : 52074;reason="Abnormal signout";source="";domain=""; peerServer=""; DiagCode="0"; HRESULT="0x80ee0088"; SignOutTime="2013-04-15T22-45-14Z"; SignInTime="2013-04-15T22-46-18Z"
    Client version
    : CPE/4.0.7577.4372 OC
    Phone/4.0.7577.4372 (Microsoft
    LyncPhoneEdition)
    From User
    : [email protected]
    To User
    : [email protected]
    The part that concerns me is the "ABNORMAL SIGNOUT" message.  I found that this is happening to quite a few users around the company and quite frequently.  Has anyone else seen this issue before and if so, any clue as to what an abnormal
    signout is?  Upper-management would like an explanation and i'm not quite sure how to explain it. 
    Any thoughts?
    John K. Boslooper Unified Communication Engineer

    Thanks for responding Lisa. 
    I don't see the exact events described in the KB Article that you sent but I do see some similar schannel errors that are not descript at all.
    Log Name:      System
    Source:        Schannel
    Date:          4/19/2013 9:03:09 AM
    Event ID:      36888
    Task Category: None
    Level:         Error
    Keywords:     
    User:          SYSTEM
    Computer:      xxx.xxx.local
    Description:
    The following fatal alert was generated: 10. The internal error state is 1203.
    Our certificates are provided by a 3rd party provider. 
    I just had a user next to me a few minutes ago say that his phone disconnected and reconnected itself randomly.  I looked at the snooper logs and found an "ABNORMAL SIGNOUT" message for his account. 
    I'm looking at a network hiccup or PoE issues right now, unless someone else has any other ideas?
    John K. Boslooper Unified Communication Engineer

  • HT201269 Hi, I have just changed contract and phone and wish to transfer the content of my iphone 4 to my new phone device which is not and I-product.  When I attempt to sign into i-tune to transfer the item to dropbox, i am unable to sign into i-tune.  H

    Hi, I have just changed contract and phone and wish to transfer the content of my iphone 4 to my new phone device which is not and I-product.  When I attempt to sign into i-tune to transfer the item to dropbox, i am unable to sign into i-tune.  Help pls.

    Hi, Kilted, I shall put it as below:
    Cancelled a contract on my Iphone and started another contract with  Samsung Note 2 on O2.  Managed to transfer almost all my data bar the content of my notes through drag and drop from itune to sKies prior to contract cancellation.
    When I later connected the iphone to the laptop to carry out an advise of going into itune to drag and drop the note content into dropbox from where I could pull into the samsung device, I was denied access into itune with my id , the same which has facilitated my access to this chat community.
    Question then: Am I not able to use itune again because of the contract cancellation?

  • I can not get my phone to sign in to my wi fi. I used to, then I lost power to the internet and now it won't. Al other devices will.

    I can not get my phone to sign in to my wi fi. I used to, then I lost power to the internet and now it won't. All other devices will.

    Try forgetting the Wi-Fi network and then joining it again, just tap Settings >  Wi-Fi > the arrow next to your network > Forget this Network, then join the network again.
    If that doesn't do it, take a look at this Apple doc -> iOS: Troubleshooting Wi-Fi networks and connections

  • Lync phone (Polycom CX600 / HP 4120) - can't sign in

    Hi,
    We have Lync server 2010 deployed. 
    I've prepared infrastructure for for Lync Phone edition by next steps:
    Added options to DHCP:
    PS C:\Program Files\Common Files\Microsoft Lync Server 2010> .\DHCPUtil.exe -emulateclient
    Starting Discovery ...
    Sending Packet (Size: 288, Network Adapter: 10.20.1.91, Attempt Type: Broadcast only)
    --Begin Packet--
    DHCP: INFORM (xid=AB7EB7A6)
    DHCP: Op Code (op) = 1
    DHCP: Hardware Type (htype) = 6
    DHCP: Hops (hops) = 0
    DHCP: Transaction ID (xid) = 2877208486
    DHCP: Seconds (secs) = 0
    DHCP: Flags (flags) = 0000
    DHCP: Client IP Address (ciaddr) = 10.20.1.91
    DHCP: Your IP Address (yiaddr) = 0.0.0.0
    DHCP: Server IP Address (siaddr) = 0.0.0.0
    DHCP: Relay IP Address (giaddr) = 0.0.0.0
    DHCP: Client HW Address (chaddr) = 005056B85D34
    DHCP: Server Host Name (sname) =
    DHCP: Boot File Name (file) =
    DHCP: Magic Cookie = 99.130.83.99
    DHCP: Option Field
    DHCP: DHCP MESSAGE TYPE( 53) = (Length: 1) DHCP INFORM
    DHCP: Server Identifier( 54) = (Length: 0) 0.0.0.0
    DHCP: Client Identifier( 61) = (Length: 7) ☺ (01005056B85D34)
    DHCP: SIP Server( 120) = (Length: 0) enc:0 ()
    DHCP: Host Name( 12) = (Length: 14) SRV-LYNC-FEP01
    DHCP: Vendor Identifier( 60) = (Length: 12) MS-UC-Client
    DHCP: Param Req List( 55) = (Length: 2) 120 43
    DHCP: Vendor Info( 43) = (Length: 0) ()
    DHCP: End of this option field
    --End Packet--
    Received Packet
    Sender:10.20.1.100:67, Size:366
    --Begin Packet--
    DHCP: ACK (xid=AB7EB7A6)
    DHCP: Op Code (op) = 1
    DHCP: Hardware Type (htype) = 6
    DHCP: Hops (hops) = 0
    DHCP: Transaction ID (xid) = 2877208486
    DHCP: Seconds (secs) = 0
    DHCP: Flags (flags) = 0000
    DHCP: Client IP Address (ciaddr) = 10.20.1.91
    DHCP: Your IP Address (yiaddr) = 0.0.0.0
    DHCP: Server IP Address (siaddr) = 0.0.0.0
    DHCP: Relay IP Address (giaddr) = 0.0.0.0
    DHCP: Client HW Address (chaddr) = 005056B85D34
    DHCP: Server Host Name (sname) =
    DHCP: Boot File Name (file) =
    DHCP: Magic Cookie = 99.130.83.99
    DHCP: Option Field
    DHCP: DHCP MESSAGE TYPE( 53) = (Length: 1) DHCP ACK
    DHCP: Server Identifier( 54) = (Length: 4) 10.20.1.100
    DHCP: Client Identifier( 61) = (Length: 0) ()
    DHCP: SIP Server( 120) = (Length: 24) enc:0 pool-main.scnsoft.com (0009706F6F6C2D6D61696E0773636E736F66740363
    6F6D00)
    DHCP: Host Name( 12) = (Length: 0)
    DHCP: Vendor Identifier( 60) = (Length: 0)
    DHCP: Param Req List( 55) = (Length: 0) 0 0
    DHCP: Vendor Info( 43) = (Length: 88) ☺♀MS-UC-Client☻♣https♥§pool-main.scnsoft.com♦♥443♣%/CertProv/CertProvis
    ioningService.svc (010C4D532D55432D436C69656E74020568747470730315706F6F6C2D6D61696E2E73636E736F66742E636F6D0403343433052
    52F4365727450726F762F4365727450726F766973696F6E696E67536572766963652E737663)
    DHCP: End of this option field
    --End Packet--
    Result: Success
    DHCP Server : 10.20.1.100
    SIP Server FQDN : pool-main.scnsoft.com
    Certificate Provisioning Service URL : https://pool-main.scnsoft.com:443/CertProv/CertProvisioningService.svc
    Also Test-CsPhoneBootstrap succeed.
    Test-CsPhoneBootstrap -PhoneOrExt 7007 -PIN xxxxxxxx
    TargetUri : https://pool-main.scnsoft.com:443/CertProv/CertProvisioningService.svc
    TargetFqdn : pool-main.scnsoft.com
    Result : Success
    Latency : 00:00:02.0099177
    Error :
    Diagnosis :
    But when i try to connect using USB - it just writing "Connecting to Lync Server"
    If I try to use number and pin - I 've got message:
    An account matching this phone number cannot be found.
    Can some one give and advice how to solve this?

    Hi,
    Please add the parameters to run Test-CsPhoneBootstrap just like this:
    Have you tried to run cmdlet Test-CsPhoneBootstrap -PhoneOrExt
    8001 -PIN 12345
    Please try to Validate Options 43 & 120 as described in Jeff's blog:
    http://blog.schertz.name/2010/12/configuring-lync-server-for-phone-edition-devices/
    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information
    found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
    The issue maybe also related to DHCP. If you use Windows DHCP servers, please try to check if the status of Lync Server DHCP feature is disabled.(Get-CsRegistrarConfiguration –EnableDHCPServer)
    Kent Huang
    TechNet Community Support

  • Sign in failed. An unknown error occurred message appears on my phone. I've reset my password.

    Sign in failed. An unknown error occurred message appears on my phone. I've already reset my password. I can't edit pics on my phone without accessing it online.

    Hi, I'e never heard of that error before!???
    Is this purchased music, or your own music files?

  • Lync Common Area Phone automatic sign-in

    Yesterday, there was unexpected network fluctuation and that caused all the common area phone to go offline. Lync conference room physical phones were went offline until each one is manually logged in.
    Please advise, how to make it automated...once the phone reboot or similar network outage?
    Thanks
    Funnyghost

    Hi,
    1.  Please disable Hotdesking in Lync Client Policy then test again.
    2.  Please install KB 2737909, 2737910, 2737911 in the link below:
    http://support2.microsoft.com/kb/2781617
    3.  Please also update to the latest firmware of Lync Phone to check the issue.
    Best Regards,
    Eason Huang
    Eason Huang
    TechNet Community Support

  • Lync HP 4120 Sign in problems with Lync Server 2013

    Hi, this is my second request for help, this with more information...
    I`ll ready install the follow infrastructure:  (I change the name of my organization for contoso)
    Lync Server 2013 Installation with Enterprise mode with 1 front end :  Pool: lync.contoso.com  Front End: lyncfe01.contoso.com     Back End: lyncsql01.contoso.com
    I`ll ready install a PKI infrastructure with two tiers, the root offline and the subordnate ac.contoso.com
    This with the defailt algorithm configuration RSA SHA1
    My phones are HP 4120 
    In the Front End Server i configured the SCHANNEL registers:
    EnableSessionTicket in 2
    Send..etc in 0
    Ok, the installation is ok, services are OK, Client login trough PC its OK, PSTN Configuration... (I can make a phonecall with the lync client of Office 365)
    Commnd Checks:  
    When i run the command Test-CsPhoneBootstrap -PhoneOrExt 12345 -PIN 123456 -TargetFqdn lync.contoso.com
    The result is:
    Target Fqdn   : lync.contoso.com
    Target Uri    : https://lync.contoso.com:443/CertProv/CertProvisioningService.svc
    Result        : Success
    Latency       : 00:00:09.0559615
    Error Message :
    Diagnosis     :
    When i run the command Test-CsPhoneBootstrap -PhoneOrExt 12345 -PIN 123456 for
    check the DHCP the result is:
    Target Fqdn   : lync.contoso.com
    Target Uri    : https://lync.contoso.com:443/CertProv/CertProvisioningService.svc
    Result        : Success
    Latency       : 00:00:09.0559615
    Error Message :
    Diagnosis     :
    When i run the follow command 
    PS C:\Users\Administrator> $cred = Get-Credential
    cmdlet Get-Credential at command pipeline position 1
    Supply values for the following parameters:
    Credential
    PS C:\Users\Administrator> Test-CsClientAuth -TargetFqdn lync.contoso.com -UserSipAddress "sip:[email protected]" -UserCredential $cred
    I got this:
    Target Fqdn   : lync.contoso.com
    Target Uri    : https://lync.contoso.com:443/CertProv/CertProvisioningService.svc
    Result        : Success
    Latency       : 00:00:00.3431783
    Error Message :
    Diagnosis     :
    But.. when i use the same command but i remove the -targetFqdn for check the Dhcp i got this:
    VERBOSE: Workflow Instance Id 'bca95636-af7b-4b0a-b43d-dba259294b2d', started.
    VERBOSE: Command line executed is 'Test-CsClientAuth -UserSipAddress "sip:[email protected]" -UserCredential $cred
     -Verbose'.
    Target Fqdn   :
    Target Uri    :
    Result        : Failure
    Latency       : 00:00:00
    Error Message : 10060, A connection attempt failed because the connected party did not properly respond after a period
                    of time, or established connection failed because connected host has failed to respond 194.90.8.20:5061
                    Inner Exception:A connection attempt failed because the connected party did not properly respond after
                    a period of time, or established connection failed because connected host has failed to respond
                    194.90.8.20:5061
    Diagnosis     :
    VERBOSE: Workflow 'Microsoft.Rtc.SyntheticTransactions.Workflows.STClientAuthWorkflow' started.
    Workflow 'Microsoft.Rtc.SyntheticTransactions.Workflows.STClientAuthWorkflow' completed in '5.62E-05' seconds.
    Target web service Url not provided. Will have to extract it from authentication challenge.
    An exception 'Unable to establish a connection.' occurred during Workflow
    Microsoft.Rtc.SyntheticTransactions.Workflows.STClientAuthWorkflow execution.
    Exception Call Stack:    at Microsoft.Rtc.Signaling.SipAsyncResult`1.ThrowIfFailed()
       at Microsoft.Rtc.Signaling.Helper.EndAsyncOperation[T](Object owner, IAsyncResult result)
       at Microsoft.Rtc.SyntheticTransactions.Activities.GetSTSUriActivity.InternalExecute(ActivityExecutionContext
    executionContext)
       at Microsoft.Rtc.SyntheticTransactions.Activities.SyntheticTransactionsActivity.Execute(ActivityExecutionContext
    executionContext)
       at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity, ActivityExecutionContext executionContext)
       at System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRuntime workflowCoreRuntime)
       at System.Workflow.Runtime.Scheduler.Run()
       at System.Net.Sockets.Socket.EndConnect(IAsyncResult asyncResult)
       at Microsoft.Rtc.Internal.Sip.TcpTransport.OnConnected(Object arg)
    'GetSTSUri' activity started.
    Starting STS Uri Discovery...
    ERROR getting STS Uri.
    'UnRegister' activity started.
    'UnRegister' activity completed in '3.12E-05' seconds.
    VERBOSE: Workflow Instance ID 'bca95636-af7b-4b0a-b43d-dba259294b2d' completed.
    VERBOSE: Workflow run-time (sec): 126.0548512.
    The Real Problem is that my Lync HP 4120 Phone can't make a sign in, not from USB cable loging, nor with PIN authentification
    When I try to make a login with the USB cable, I set the user and password and the phone says "Connecting to Lync".. "Downloading a certificate" ... "Installing certificate"... "Downloading Certificate"...
    "Installing Certificate".. forever 
    When I try to make a login with PIN Authentification, the phone first displays the following:
    Account used is not authorized, Please Contact your support team and then shows this:
    An Account matching this phone number cannot be found. Please contact your support team.
    The Pin authentification is enable
    In the Lync Server Enable Kerberos Authentification, Enable Integrated Windows Authentification and Enable Certificate Authentification are enable
    This is the configuration from DHCP 
    Starting Discovery ... 
    Sending Packet (Size: 284, Network Adapter: xx.xx.xx.xx, Attempt Type: Broadcast only)
    --Begin Packet--
    DHCP: INFORM                (xid=130EA7FA)
    DHCP: Op Code           (op)      = 1
    DHCP: Hardware Type     (htype)   = 6
    DHCP: Hops              (hops)    = 0
    DHCP: Transaction ID    (xid)     = 319727610
    DHCP: Seconds           (secs)    = 0
    DHCP: Flags             (flags)   = 0000
    DHCP: Client IP Address (ciaddr)  = Xx.xx.xx.xx
    DHCP: Your IP Address   (yiaddr)  = 0.0.0.0
    DHCP: Server IP Address (siaddr)  = 0.0.0.0
    DHCP: Relay IP Address  (giaddr)  = 0.0.0.0
    DHCP: Client HW Address (chaddr)  = FC15B4###--End Packet--
    Received Packet
    Sender:xx.xx.xx.xx:67, Size:363
    --Begin Packet--
    DHCP: ACK                (xid=130EA7FA)
    DHCP: Op Code           (op)      = 1
    DHCP: Hardware Type     (htype)   = 6
    DHCP: Hops              (hops)    = 0
    DHCP: Transaction ID    (xid)     = 319727610
    DHCP: Seconds           (secs)    = 0
    DHCP: Flags             (flags)   = 0000
    DHCP: Client IP Address (ciaddr)  = xx.xx.xx.xx
    DHCP: Your IP Address   (yiaddr)  = 0.0.0.0
    DHCP: Server IP Address (siaddr)  = 0.0.0.0
    DHCP: Relay IP Address  (giaddr)  = 0.0.0.0
    DHCP: Client HW Address (chaddr)  = FC15B4100289
    DHCP: Server Host Name  (sname)   = 
    DHCP: Boot File Name    (file)    = 
    DHCP: Magic Cookie                = 99.130.83.99
    DHCP: Option Field
        DHCP: DHCP MESSAGE TYPE(  53) = (Length: 1) DHCP ACK
        DHCP: Server Identifier(  54) = (Length: 4) XX.XX.XX.XX
        DHCP: Client Identifier(  61) = (Length: 0)  ()
        DHCP: SIP Server( 120)        = (Length: 17) enc:0 lync.contoso.com (00046C796E6306756E69736F6E026D7800)
        DHCP: Host Name(  12)         = (Length: 0) 
        DHCP: Vendor Identifier(  60) = (Length: 0) 
        DHCP: Param Req List(  55)    = (Length: 0) 0 0
        DHCP: Vendor Info(  43)       = (Length: 86) MS-UC-Clienthttpslync.contoso.com443%/CertProv/CertProvisioningService.svcÜNAP (010C4D532D55432D436C69656E7402056874747073030E6C796E632E756E69736F6E2E6D78040334343305252F4365727450726F762F4365727450726F766973696F6E696E67536572766963652E737663DC034E4150)
        DHCP: End of this option field
    --End Packet--
    Result: Success
    DHCP Server : xx.xx.x.xx.
    SIP Server FQDN : lync.contoso.com
    Certificate Provisioning Service URL : https://lync.contoso.com:443/CertProv/CertProvisioningService.svc
    thanks for all, hope somebody can help me with this problem.. i am going crazy...

    Hi, i connected the Lync Phone to another switch and i update the firmware to the newest firmware and i got the same problem..  
    The lync phone download the certificate but cant install it and the still the same error with the SIP login
    An Account matching this phone number cannot be found. Please contact your support team.

  • Sign in failed

    I get notifications on my phone that say verizon sign in failed . When I open it it says server password has changed.I still send and receive emails normally .
       So how do I correct this issue

    VWCS, Skywriter already gave you the information you are requesting, as did I, tho my message has been ignored.
    When did you notice this happening? Months ago.  What error messages are you getting?  Sign-in failed.
    Are other emails working fine? The issue is only with with my Verizon email accounts. 
    There are identical messages all over the message boards and Verizon hasn't responded with a solution to any of them, including the OP on this thread (factory reset the device is not a solution - its a cop-out and it doesn't work anyway).  We can still send and receive emails from these accounts, but the error messages are frustrating.  When you figure out the cause, and a true solution, please let us know.

  • Lync Phone Edition - extension normalization search

    Hi Guys,
    Here is what I got going on:
    Lync Enterprise Voice Standard Edition - single frontend - single edge.
    Lync User LineURI = tel:+1222333xxxx;ext=xxxx
    Active directory user telephone number = +1222333xxxx
    Lync dialplan normalization rule - Internal Extension - ^(47\d{2})$ --> +1222333$1
    This setup allows all call flow to work spectacularly well.  Except... when a user dials the 4 digit extension on the lync phone edition (polycom cx600) the translation rule kicks in and changes it to E.164.  Example: user dials 4784 and it normalizes
    the number to +12223334784.  This again works great except it never associates the translated number to a lync user account.  so no presence, no contact card with other numbers, etc.  
    Additional information:  Lync client (2013 and Skype for business) - when i input 4784 into the "find someone or dial number" field, it will normalize the number and show 2 contacts.  1. the first contact it shows is the same as lync
    phone edition, only the normalized number.  2. the second contact is the lync user with presence and additional numbers, etc.
    So my question is this: What settings above should be adjusted in order for a 4 digit extension to be associated with the user in all searches?
    I thought that if i normalized the extension to the AD telephone attribute it would search and find the correct contact but it seems that is not the case.  
    What settings from above should i adjust to make extension dialing seamless for my users.
    Thank you for reading this long post.  I look forward to your insights!
    -Brandon

    Hi Brandon,
    Here’re some suggestions for your reference.
    1. It’s recommend to install the latest update of the Lync Phone Edition for your device.
    2. Have you tried to sign in by connecting the device to your computer by using a USB cable ?
    3. Try to configure the value of client policy parameter AddressBookAvailability to WebSearchOnly.
    Best regards,
    Eric
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Maybe you are looking for

  • How to get the Component id (HTMLB id)

    Hi all, I created an application that has two list boxes and one commend button. While clicking the button I need to know how many list items in the list box. Is this possible? Anybody can guide me for this. Helpful answer will appreciate. Thanks & R

  • What is better for gaming: 1 gig of RAM DDR400 or 2 gigs DDR333?

    I just bought my first AMD box. AMD 64 3500+ Venice, nForce 4 Ultra. I have 2 gigs of RAM laying around. With 2 gigs of RAM in my computer it only runs at DDR333, whereas with 1 gig I can run it at DDR400. I know I could benchmark all this stuff, but

  • Apply Actuals ...how to remove them..

    I need to remove actuals from a period of performance that is not showing up on as an option under Financial Period Value Columns ...I accidently hit Apply actuals instead of schedule ..

  • CS4 : Accessing points on a Curve from keyboard

    No problem in earlier versions (Control-Tab, or Control Shift Tab), unable to do so in CS4 on my MacIntel running 10.5.5. Trying to get acquainted with this version installed on an external drive on which my system is cloned. And while I'm at it, the

  • "I got my Internal HD Full, but I've already deleted all my files"

    I got an iMac G3 and I can't do anything, no printing, no opening pdf's, no opening word, excel, pwpoint documents, no photos or music. My Internal HD sais that I got 0 available memory, but I've already deleted all my files (photos, music, docs... a