Lync Server 2013 - Edge Certificate Problem

Question

Hi,
A few days ago, we have discover that the Edge server of Lync 2013 has failed in replicating the store from Lync Front-End server.
From the Event Viewer, I get the below event logged.
And the details
============================================================================================
TLS outgoing connection failures.
Over the past 2 minutes, Lync Server has experienced TLS outgoing connection failures 20 time(s). The error code of the last failure is 0x80090322(SEC_E_WRONG_PRINCIPAL) while trying to connect
to the server "lyncedge.xxx.yyy" at address [xxx.xxx.xxx.xxx:5061], and the display name in the peer certificate is "Unavailable".
Cause: Most often a problem with the peer certificate or perhaps the host name (DNS) record used to reach the peer server. Target principal name is incorrect means that the peer certificate does
not contain the name that the local server used to connect. Certificate root not trusted error means that the peer certificate was issued by a remote CA that is not trusted by the local machine.
Resolution:
Check that the address and port matches the FQDN used to connect, and that the peer certificate contains this FQDN somewhere in its subject or SAN fields. If the FQDN refers to a DNS load balanced
pool then check that all addresses returned by DNS refer to a server in the same pool. For untrusted root errors, ensure that the remote CA certificate chain is installed locally. If you have already installed the remote CA certificate chain, then try rebooting
the local machine.
============================================================================================
Kindly advice if anyone have come across this issue ?

Answer 1

Hi,
I managed to resolve the issue. I have added  a DWORD of ClientAuthTrustedMode with Value 2 below
HKey_Local_Machine\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL
Once the Lync Edge restarted, the replication kicks in without error.
Thanks all