Lync server with HA

hi,
How many lync server licences are required if deployment requires the ff:
2 x Lync front end with HA
2 x SQL back end with HA
tnx

With Lync you only need to license the front end role. So in this case you would need two Lync server licenses but you would not need additional for edge or mediation roles. For SQL licensing, you would need a couple of SQL server licenses as well. One
last item, for Lync 2013 it is strongly recommended that at least 3 front ends (and therefore three Lync server licenses) be deployed for HA due to the way quorum works.
Outside of that, you'll need Windows licenses, client access licenses, and a hardware load balancer too.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Similar Messages

Remote PowerShell Connection to Lync Server With Kerberos authentication Fails

Hi everyone ,
Remote PowerShell to Lync Server With Kerberos authentication Fails .. Is there any reason for not being able to connect when authentication specified as Kerberos . But exactly same code works when Authentication is specified as "Negotiate"
E.g :
Error -
$session=New-PSSession -ConfigurationName Microsoft.Powershell -ConnectionUri https://serverName.lync.com/ocspowershell/ -Credential $cred -Authentication Kerberos
[serverName.lync.com] Connecting to remote server failed with the following error message : The WinRM client cannot process the request. The authentication mechanism requested by the client is not supported by the server or unencrypted traffic is disabled in
the service configuration. Verify the unencrypted traffic setting in the service configuration or specify one of the authentication mechanisms supported by the server. To use Kerberos, specify the computer name as the remote destination. Also verify
that the client computer and the destination computer are joined to a domain.To use Basic, specify the computer name as the remote destination, specify Basic authentication and provide user name and password. Possible authentication mechanisms reported by
server:   Digest Negotiate For more information, see the about_Remote_Troubleshooting Help topic.
    + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportExc
   eption
    + FullyQualifiedErrorId : PSSessionOpenFailed
Works -
$session=New-PSSession -ConfigurationName Microsoft.Powershell -ConnectionUri https://serverName.lync.com/ocspowershell/ -Credential $cred -Authentication Negotiate

Hi,
Please double check if Windows Update is the latest version, if not, please update and then test again.
Please also ensure that the workstation you are using has network access to the Certificate Authority that signed the certificate.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Enable-CsUser in lync server with c# remotly

hi
i want Enable-CsUser
trought c# from my server that in joined to my domain in my test lab
FQDN of lync server is lync.mohsen.com and I want enable "asadi" into my lync server("asadi" is exist in ldap and exchange")
this is my code
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Management.Automation;
using System.Management.Automation.Remoting;
using System.Management.Automation.Runspaces;
using System.Security;
namespace ConsoleApplication2
class Program
static SecureString GetSecurePassword(string password)
var securePassword = new SecureString();
foreach (var c in password)
securePassword.AppendChar(c);
return securePassword;
static void Main(string[] args)
string lyncUser = "administrator";
string _pass = "abc@123";
var lyncPW = GetSecurePassword(_pass);
var fqdnlync = "lync.mohsen.com";
var user = "asadi";
var sipadd = "[email protected]";
// lync server 2013
//this code is same as EXchange code in schima
PSCredential creds = new PSCredential(lyncUser, lyncPW);
WSManConnectionInfo conn = new WSManConnectionInfo(new Uri("https://lync.mohsen.com/ocspowershell"), "http://schemas.microsoft.com/powershell/Microsoft.PowerShell", creds);
conn.AuthenticationMechanism = AuthenticationMechanism.Default;
Runspace runspace_2 = RunspaceFactory.CreateRunspace(conn);
PowerShell powershell_2 = PowerShell.Create();
PSCommand command_2 = new PSCommand();
command_2.AddCommand("Enable-CsUser");
command_2.AddParameter("Identity", user);
command_2.AddParameter("RegistrarPool", fqdnlync);
command_2.AddParameter("SipAddressType", sipadd);
powershell_2.Commands = command_2;
try
runspace_2.Open();
powershell_2.Runspace = runspace_2;
powershell_2.Invoke();
catch (Exception ex)
Console.WriteLine(ex.ToString()); console.readkey();
finally
runspace_2.Dispose();
runspace_2 = null;
powershell_2.Dispose();
powershell_2 = null;
but this code dont work!
Where did I go wrong?
need to config any thing in lync server?

Does your Administrator account (which you've used to create the remote session) belong to the RTCUniversalUserAdmins RBAC group in AD? This will be needed at minimum to be able to run Enable-CsUser through a remote powershell.
There is also a Lync development forum, which may be more useful for your question: http://social.msdn.microsoft.com/Forums/lync/en-US/home?category=lync
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
Georg Thomas | Lync MVP
Blog www.lynced.com.au | Twitter
@georgathomas
Lync Edge Port Check (Beta)

Persistent Chat (Lync Server 2013) with Lync 2010 Group Chat

I have successfully deployed Lync Server 2013 and both 2013 and 2010 desktop clients connect and function as expected.
The problem is with Persistent Chat. It works perfectly with the 2013 desktop client but - whilst 2010 Group Chat connects - I receive the error message "The [LOGON_DOMAIN] is not available". No chat rooms are available and I am unable to search.
I have been unable to locate anything on the web which discusses the problem.
I do not know whether this makes a difference but the 2010 clients use terminals rather than dedicated workstations.
Can anyone shed any light on what the problem may be?

Have you created a CsPersistentChatEndpoint to allow the Group Chat client (2010) to connect to Persistent
Chat server? Please take a look at: http://technet.microsoft.com/en-us/library/jj204901.aspx
Please mark posts as answers/helpful if it answers your question.
Blog
Lync Validator - Used to assist in the validation and documentation of Lync Server 2013.

The Lync Server Front-End service terminated with service-specific error %%-1008124893.

Hello, everyone
I've installed Lync Server 2010. There was no error during installation. But when i start Lync Server Front End Server, i'm getting following error:
The Lync Server Front-End service terminated with service-specific error %%-1008124893.
In event viewer:
The evaluation period for Microsoft Lync Server 2010 has expired. Please upgrade from the evaluation version to the fully licensed version of the product. Look at help for Setup.exe to learn how to upgrade from evaluation version to the licensed version.
Cause: The evaluation period for Microsoft Lync Server 2010 has expired.
I've upgraded Lync Server according to http://technet.microsoft.com/en-us/library/gg521005.aspx?ppud=4
Also I've installed all Lync Server updates.
But I still could not start Lync Front End Sever. How can I solve this problem?
Thanks

Hi,
Can you try to run
start-cswindowsservice -report c:\report.html
and post the report so we can have more information about your problem ?
Regards,
Adrian TUPPER - ABC Systemes - http://thelyncexperience.blog.com/ If answer is helpful, please hit the green arrow on the left, or mark as answer Thank you

Lync Server 2010 conference not working with Windows 8.1 and IE 10

Hello,
The problem is that whenever a Windows 8.1 user tries to join a Lync server 2010 conference using Internet Explorer 10 (or 11, tried that too) the user can't join the conference. If the conference is created by a Lync server 2013 user joining works fine.
When using Lync 2010 client we get the following error in the client: "error id 87 source id 7".
When using Lync 2013 client we end up with a blank conversation window.
There are no traces in server log, client log or event log.
Below is a set of use cases that may help you to understand what is the problem scenario. Each of these works or does not work with both Lync 2010 and Lync 2013 client.
- Lync server 2010 conference, windows 7, Chrome, Firefox, IE 10 or 11 --> Works.
- Lync server 2010 conference, windows 8.1, IE 10 or 11 --> Does not work.
- Lync server 2010 conference, windows 8.1, Chrome or Firefox --> Works.
- Lync server 2013 conference, windows 8.1, Chrome, Firefox, IE 10 or 11 --> Works.
It does not help to add the meet address to IE compatibility list (Compatibility View Settings).
If i press F12 in IE and change the document mode of the meet page to IE 9 version then i can join meetings with Windows 8.1 and IE 10. Unfortunately i cannot make that as a default setting for the meet website.
Any ideas on how to get Lync server 2010 meetings working with Windows 8.1 and IE 10 or 11?
IE is the company default browser. Windows 8.1 is not a default operating system but we have increasing number of Windows 8.1 computers in our environment (mainly directors).

According to your description, it is hard to tell whether the issue is related with IE or Lync Server 2010 or both.
Compare the log when Lync client on Window 8.1 with IE 10 or IE 11 join Lync server 2010 conferencing and Lync Server 2013 conferencing.
Lisa Zheng
TechNet Community Support

Lync HP 4120 Sign in problems with Lync Server 2013

Hi, this is my second request for help, this with more information...
I`ll ready install the follow infrastructure: (I change the name of my organization for contoso)
Lync Server 2013 Installation with Enterprise mode with 1 front end : Pool: lync.contoso.com Front End: lyncfe01.contoso.com Back End: lyncsql01.contoso.com
I`ll ready install a PKI infrastructure with two tiers, the root offline and the subordnate ac.contoso.com
This with the defailt algorithm configuration RSA SHA1
My phones are HP 4120
In the Front End Server i configured the SCHANNEL registers:
EnableSessionTicket in 2
Send..etc in 0
Ok, the installation is ok, services are OK, Client login trough PC its OK, PSTN Configuration... (I can make a phonecall with the lync client of Office 365)
Commnd Checks:
When i run the command Test-CsPhoneBootstrap -PhoneOrExt 12345 -PIN 123456 -TargetFqdn lync.contoso.com
The result is:
Target Fqdn : lync.contoso.com
Target Uri : https://lync.contoso.com:443/CertProv/CertProvisioningService.svc
Result : Success
Latency : 00:00:09.0559615
Error Message :
Diagnosis :
When i run the command Test-CsPhoneBootstrap -PhoneOrExt 12345 -PIN 123456 for
check the DHCP the result is:
Target Fqdn : lync.contoso.com
Target Uri : https://lync.contoso.com:443/CertProv/CertProvisioningService.svc
Result : Success
Latency : 00:00:09.0559615
Error Message :
Diagnosis :
When i run the follow command
PS C:\Users\Administrator> $cred = Get-Credential
cmdlet Get-Credential at command pipeline position 1
Supply values for the following parameters:
Credential
PS C:\Users\Administrator> Test-CsClientAuth -TargetFqdn lync.contoso.com -UserSipAddress "sip:[email protected]" -UserCredential $cred
I got this:
Target Fqdn : lync.contoso.com
Target Uri : https://lync.contoso.com:443/CertProv/CertProvisioningService.svc
Result : Success
Latency : 00:00:00.3431783
Error Message :
Diagnosis :
But.. when i use the same command but i remove the -targetFqdn for check the Dhcp i got this:
VERBOSE: Workflow Instance Id 'bca95636-af7b-4b0a-b43d-dba259294b2d', started.
VERBOSE: Command line executed is 'Test-CsClientAuth -UserSipAddress "sip:[email protected]" -UserCredential $cred
-Verbose'.
Target Fqdn :
Target Uri :
Result : Failure
Latency : 00:00:00
Error Message : 10060, A connection attempt failed because the connected party did not properly respond after a period
of time, or established connection failed because connected host has failed to respond 194.90.8.20:5061
Inner Exception:A connection attempt failed because the connected party did not properly respond after
a period of time, or established connection failed because connected host has failed to respond
194.90.8.20:5061
Diagnosis :
VERBOSE: Workflow 'Microsoft.Rtc.SyntheticTransactions.Workflows.STClientAuthWorkflow' started.
Workflow 'Microsoft.Rtc.SyntheticTransactions.Workflows.STClientAuthWorkflow' completed in '5.62E-05' seconds.
Target web service Url not provided. Will have to extract it from authentication challenge.
An exception 'Unable to establish a connection.' occurred during Workflow
Microsoft.Rtc.SyntheticTransactions.Workflows.STClientAuthWorkflow execution.
Exception Call Stack: at Microsoft.Rtc.Signaling.SipAsyncResult`1.ThrowIfFailed()
at Microsoft.Rtc.Signaling.Helper.EndAsyncOperation[T](Object owner, IAsyncResult result)
at Microsoft.Rtc.SyntheticTransactions.Activities.GetSTSUriActivity.InternalExecute(ActivityExecutionContext
executionContext)
at Microsoft.Rtc.SyntheticTransactions.Activities.SyntheticTransactionsActivity.Execute(ActivityExecutionContext
executionContext)
at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity, ActivityExecutionContext executionContext)
at System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRuntime workflowCoreRuntime)
at System.Workflow.Runtime.Scheduler.Run()
at System.Net.Sockets.Socket.EndConnect(IAsyncResult asyncResult)
at Microsoft.Rtc.Internal.Sip.TcpTransport.OnConnected(Object arg)
'GetSTSUri' activity started.
Starting STS Uri Discovery...
ERROR getting STS Uri.
'UnRegister' activity started.
'UnRegister' activity completed in '3.12E-05' seconds.
VERBOSE: Workflow Instance ID 'bca95636-af7b-4b0a-b43d-dba259294b2d' completed.
VERBOSE: Workflow run-time (sec): 126.0548512.
The Real Problem is that my Lync HP 4120 Phone can't make a sign in, not from USB cable loging, nor with PIN authentification
When I try to make a login with the USB cable, I set the user and password and the phone says "Connecting to Lync".. "Downloading a certificate" ... "Installing certificate"... "Downloading Certificate"...
"Installing Certificate".. forever
When I try to make a login with PIN Authentification, the phone first displays the following:
Account used is not authorized, Please Contact your support team and then shows this:
An Account matching this phone number cannot be found. Please contact your support team.
The Pin authentification is enable
In the Lync Server Enable Kerberos Authentification, Enable Integrated Windows Authentification and Enable Certificate Authentification are enable
This is the configuration from DHCP
Starting Discovery ...
Sending Packet (Size: 284, Network Adapter: xx.xx.xx.xx, Attempt Type: Broadcast only)
--Begin Packet--
DHCP: INFORM (xid=130EA7FA)
DHCP: Op Code (op) = 1
DHCP: Hardware Type (htype) = 6
DHCP: Hops (hops) = 0
DHCP: Transaction ID (xid) = 319727610
DHCP: Seconds (secs) = 0
DHCP: Flags (flags) = 0000
DHCP: Client IP Address (ciaddr) = Xx.xx.xx.xx
DHCP: Your IP Address (yiaddr) = 0.0.0.0
DHCP: Server IP Address (siaddr) = 0.0.0.0
DHCP: Relay IP Address (giaddr) = 0.0.0.0
DHCP: Client HW Address (chaddr) = FC15B4###--End Packet--
Received Packet
Sender:xx.xx.xx.xx:67, Size:363
--Begin Packet--
DHCP: ACK (xid=130EA7FA)
DHCP: Op Code (op) = 1
DHCP: Hardware Type (htype) = 6
DHCP: Hops (hops) = 0
DHCP: Transaction ID (xid) = 319727610
DHCP: Seconds (secs) = 0
DHCP: Flags (flags) = 0000
DHCP: Client IP Address (ciaddr) = xx.xx.xx.xx
DHCP: Your IP Address (yiaddr) = 0.0.0.0
DHCP: Server IP Address (siaddr) = 0.0.0.0
DHCP: Relay IP Address (giaddr) = 0.0.0.0
DHCP: Client HW Address (chaddr) = FC15B4100289
DHCP: Server Host Name (sname) =
DHCP: Boot File Name (file) =
DHCP: Magic Cookie = 99.130.83.99
DHCP: Option Field
DHCP: DHCP MESSAGE TYPE( 53) = (Length: 1) DHCP ACK
DHCP: Server Identifier( 54) = (Length: 4) XX.XX.XX.XX
DHCP: Client Identifier( 61) = (Length: 0) ()
DHCP: SIP Server( 120) = (Length: 17) enc:0 lync.contoso.com (00046C796E6306756E69736F6E026D7800)
DHCP: Host Name( 12) = (Length: 0)
DHCP: Vendor Identifier( 60) = (Length: 0)
DHCP: Param Req List( 55) = (Length: 0) 0 0
DHCP: Vendor Info( 43) = (Length: 86) MS-UC-Clienthttpslync.contoso.com443%/CertProv/CertProvisioningService.svcÜNAP (010C4D532D55432D436C69656E7402056874747073030E6C796E632E756E69736F6E2E6D78040334343305252F4365727450726F762F4365727450726F766973696F6E696E67536572766963652E737663DC034E4150)
DHCP: End of this option field
--End Packet--
Result: Success
DHCP Server : xx.xx.x.xx.
SIP Server FQDN : lync.contoso.com
Certificate Provisioning Service URL : https://lync.contoso.com:443/CertProv/CertProvisioningService.svc
thanks for all, hope somebody can help me with this problem.. i am going crazy...

Hi, i connected the Lync Phone to another switch and i update the firmware to the newest firmware and i got the same problem..
The lync phone download the certificate but cant install it and the still the same error with the SIP login
An Account matching this phone number cannot be found. Please contact your support team.

Tricky Issue with connecting to Lync server from my desktop lync client 2010

I am facing a tricky situation here,
Firstly i have 3 modes of connecting my laptop to the internet as follows:
1)Using Wi-Fi connection.
2)A physical LAN cable connection
3)An internet data card (A USB data card).
Now, i can comfortably use my Lync using 1st and 2nd mode of connectivity. But i am having a real issue using the 3rd mode of connectivity i.e using internet data card, it just doesn't connect to the Lync server at all, even though i can browse internet
very well.
Later i got a workaround to solve this, what i did was, i connect to internet first with 1st and 2nd modes i.e wifi or lan cable and then i also connect to internet using 3rd mode i.e data card.
After this i start my Lync, which now connects perfectly and then when it is connected and working.
I disconnect my WiFi or LAN cable this causes Lync to restart, but this time it connect within minutes again using internet of my datacard, isn't this Bizarre ??
Now Could someone please help me to connect the Lync just by using my internet datacard?
Atlast 2 thing which may be of help is :
1)I can easily connect Outlook to the exchange server using my datacard and retrieve my mails.
2)When i connect to internet using my internet datacard, I can still see "Not Connected Symbol" in my network indicator on my Win7 PC, But i can still Brows
internet.
This problem may have something to do with networking, not sure. Please Help me to solve this !!!
Ambrish

Infact it was a Network Issue, found following on technet and solved the issue:
I found a solution for (my version of) this problem. My tray icon never showed the red X, but if I clicked on the icon, the popup showed a bigger icon with a red X, and said "Not connected". As in your case, Internet worked, but I'm unable to setup
a VPN connection because it insists on using a non-existent modem, obviously because I'm "not connected" (which I am).
I monitored the processes running the NlaSvc and Netprofm services (using ProcMon), and noticed that both were denied read/write access to subkeys within the HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList hierarchy.
The processes were running as NetworkService and LocalService, respectively, so I tried adding full access for these service accounts to the entire subkey
mentioned above. Notice that permissions are not automatically inherited in the registry, so you may need to explicitly "replace all child object permissions with inheritable permissions from this object".
Within seconds, Network and Sharing Center tells me I'm connected to my domain. Yay!
A reboot was required to fix the tray icon and its popup.
However, I'm still unable to add my VPN connection.
I'm interested in hearing from you guys if your registries miss the same permissions? If so, Windows 7 must have a bug somewhere with misaligned service permissions/rights.
Ambrish

Lync integration with Third-Party mail server's

Hi all,
Does Lync integrates with any third party mail servers?
Or it integrates only with Exchange Server?
Regards,
ArunKumar.J

Agree with Thamara. Exchange is the only platform supported for presence as well as voice functionality. The client uses EWS to communicate with the server to check calendar integration, nothing else is going to mimic this properly enough to
avoid issues.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

Integrating Exchange 2013 & Lync Server 2013: can't use a certificate with Seth-AuthConfig

I'm trying to integrate Exchange and Lyn Server. One of the first steps is to bind a correct certificate to IIS on all of the CAS servers and set it as a main certificate in the global AuthConfig object. The certificate must be the same on all of the
CAS servers because the autodiscover.domain.local DNS record points to all of them, and Lync Server uses this FQDN to access Exchange servers. The thumbprint of this certificate must be specified in Set-AuthConfig command run on an Exchange server.
We have an internal enterprise CA. I generated a certificate on one of the CAS servers and bound it to all of the Exchange services. Then I exported it, imported it on the second CAS server and bound it to all of the services as well. Now Exchange correctly uses
it for OWA, for example, and IE gives no security warnings when I connect to OWA.
However, whenever I run Set-AuthConfig command on any server, it keeps telling me that
The certificate with thumbprint XXXX was found but is not valid for use with Exchange Server (reason: PrivateKeyNotAccessible).
The key IS accessible - I can export the certificate along with its private key. What's wrong?

Here's the answer.
It seems that the -Server switch in the Set-AuthConfig command is only used to specify where you want to look for the certificate with the given thumbprint. However, it's impossible to predict which Exchange server will actually perform the operation
(the Server switch doesn't influence it a bit). It could be ANY server, even a mailbox one with no CAS role at all. And, of course, another Exchange server has no access to the certificate store of the CAS server where the certificate is actually stored. It
was exactly the case in my environment.
So in order to enable this certificate you must import it on ALL of your Exchange servers. You need't (and even shouldn't) enable it for any services on your mailbox servers if you don't want to, just import it.

Lync Server Integration with Exchange 2013

Hello,
I have Exchange 2013 standard edition server installed and running successfully on a Windows 2012 machine. Now, I would like to have a Lync 2013 server integrated with it. I came across some links telling that its not possible to integrate Unified Messaging
in the Exchange standard edition and would need an Enterprise edition license. But, when I checked my ECP, I could see that UM is already there and its enabled.
So, Is it possible to integrate Lync 2013 with Exchange 2013 standard edition? What all things I need to take care of while Integrating? If someone could shed some light on this, that would be greatly appreciated.
Thanks and Regards,
Nash Burns

Yes you can integrate Lync 2013 with Exchange 2013 Standard, the only big difference between Exchange 2013 Standard vs Enterprise is the number of mailbox databases (5 vs 50).
Follow this link for information on integrating the two: http://technet.microsoft.com/en-us/library/jj688098.aspx (specifically integrating Lync with Exchange for Voicemail http://technet.microsoft.com/en-us/library/jj687983.aspx)
Having said that, the confusion may be related to User CALs. You need Exchange Enterprise User CALs to use the Unified Messaging components. (I believe they still work regardless, but
to be properly licensed and compliant you need to have the correct number of Enterprise CALs for the number of users that use UM)
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer" | Blog
www.lynced.com.au | Twitter
@imlynced

Lync Enterprise with Single BE Server and Voice Routing

Hi team,
I read that the best way for a HA topology is to go ahead with 3 FE server pool(Although MS has said it's workable, many recommend not to). Now this leaves me with another problem, can I go ahead with just 1 SQL Back-End server. I know in this case SQL will
have no failover. But if we ok with the downtime, will it work properly when the BE is up?
The front-end includes the following:
Basic Lync functions
Mediation
Monitoring
Archiving
Thank you.
Chris!

Hi Crypto_J,
After the Back End Server is up, you could verify if the services of Lync Servers are normally started, and take a test.
For more details about restoring the Back End Server, please click on the link below.
Restoring the server hosting the Central Management store in Lync Server 2013
http://technet.microsoft.com/en-us/library/hh202172.aspx
To ensure high availability for your Back End Servers, you can use either synchronous SQL mirroring or SQL clustering.
Using one of these solutions optional, but is recommended to maintain your organization's business continuity.
Best regards,
Eric

SCOM 2012 R2 Integration with Lync Server 2013

Hi,
I am trying to configure SCOM 2012 R2 to work with Lync server 2013 standard edition. I have successfully installed and tested Lync Server 2013. But the problem is, I never worked on SCOM application before and I can not find any easy documents online. So
could you please help me and suggest any step by step guide for the same purpose!
BR,
Ajit

Hi,
Glad to hear that you have solved the issue. For the second question, what did you want to do with the Windows Server (anything to do with Lync Server)? As it is another question, you can also post another case on Technet forum and more engineers will help
you solve the issue.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Integrating Lync 2010 with Avaya AES Server

Dears,
I'm trying to integrate AES 5.2.3 with Super Patch 2 installed with Lync Server 2010. I installed one Lync Front-End Standard Edition and followe the instruction in the below URl:
http://support.avaya.com/css/P8/documents/100144425
Also, Customer has AD which use S-LDAP connection, so communication with AD over 389 port is not allowed, we are using 636 port.
I noticed that the CA server (Windows 2003) installed on the environment is Standalone Server, so I cannot find "Certificate Template" in the CA Console but i got it from MMC snap-in and created the required template according to the document (above URL)
but and continue the steps.
when I enabled users to RCC, and login to Lync Client, i got an error "No Phone System Connection"
and from snooper, i found
ms-diagnostics: 1038;reason="Failed to connect to a peer server";WinsockFailureCode="10061(WSAECONNREFUSED)";WinsockFailureDescription="The peer actively refused the connection attempt";Peer="aesad.domain.com";Port="4723";source="LYNCFE.domain.com"
by reviewing the certificate on FE server and AES server, i found that, Enhanced Key Usage: Server Authentication although i used a template that afford Server & Client Authentication.
Also, I don't have another server to create Trusted App Pool, so when I run the power shell command I got a warning advise that this machine (App Pool Name) doesn't has Computer Object in AD.
My Questions:
Is the certificate issued to Lync and AES correct or it should contain both Server & Client Authentication?
Can I use Standalone CA to issue this type of Certificates or I have to install Enterprise CA?
What is the cause of "No Phone System Connection" Error?
How can I check if AES accept communication with Lync on 4723? I tried to telnet with no luck.
Is it supported to allow AES to communicate S-LDAP?
Regards, Fady Naguib

Hi Fady,
1.You issued incorrect certificate for Lync and AES. The certificate templates from MMC snap-in is different from the templates form certification Authority. I donot know why there is no "Certificate Template" in your CA console. Do you install the CA component?
2.Maybe It can work you use standalone CA to issue certificate to Lync deployment, but it isnot recommended. You'd better add your CA server to domain and install Enterprise CA.
3.Verify you have add AES server to lync Trusted APP pool successfully. AES server has opend port 4723 port in firewall. You'd better install Enterprose CA and create templates in the CA templates, and issue the certificate for lync server.
4.Make sure AES server has opend port 4723 port in firewall.
5.I think the AES server can communicate s-ldap. you should add AES SERVER FQDN to AD and create A record for it.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Lync 2013 Edge and Reverse proxy on same server with SNI

Hello
I cannot find information if it is possible to create a single Lync 2013 Edge server with a Reverse proxy on the same server?
Would it not be possible to share port 443 with SNI support? That way we could use only one public IP?
Thanks!

Sorry, it doesn't work. Remember that 443 isn't HTTPS for the Edge. If you went with the single IP model for the edge, 443 would be used for the A/V role which would be STUN/TURN.
The edge will always want to listen on 443, it just doesn't work to collocate a reverse proxy.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Lync server with HA

Similar Messages

Maybe you are looking for