Plantronics + Polycom. Now together as Poly Logo

Trio 8800 Skype for Business Sign-In Certificate Error

Occasional Visitor

Trio 8800 Skype for Business Sign-In Certificate Error

Hi,

 

I am having trouble Signing in to Skype for Business on the Trio 8800.

Software Version: 5.8.0.15024
Base Profile: SfB

I try to log in to skype with Sign-in Address/User my email and password, Domain is empty.
I get the error "Failed to fetch root certificate".

 

I have set the following DNS entries on my server:
name                          type          data
lyncdiscover               CNAME    webdir.online.skype.de.
sipdir                          CNAME    sipdir.online.skype.de.
_sip._tls                      SRV         100 1 443 sipdir.online.skype.de.
_sipfederationtls._tcp SRV         100 1 5061 sipfed.online.skype.de.

 

Am i missing more DNS settings?
What is the issue here?


The log entries:

https://webdirde1.online.skype.de/WebTicket/WebTicketService.svc/cert
https://login.microsoftonline.de/common/oauth2/authorize https://webdirde1.online.skype.de/WebTicket/WebTicketService.svc/OAuth https://webdirde1.online.skype.de/WebTicket/WebTicketService.svc https://login.microsoftonline.de/common/oauth2/authorize http://nexus.microsoftonline-p-int.com/federationmetadata/2006-12/ 0205082253|wad |4|00|Not able to get WT from Auth Service 0205082253|sip |*|00|Sip Register Usr:marc.schneider@xxx.com Dsp:marc.schneider Auth:'Using Login Cred' Inx:0 0205082253|utilm|4|00|uBLFUnCompressed: File /data/polycom/ffs0/Config/Local/WebTicket/0/sip.usr doesn't exist or is empty 0205082253|utilm|4|00|uBLFUnCompressed: File /data/polycom/ffs0/Config/Local/WebTicket/0/sip.usr doesn't exist or is empty 0205082257|copy |4|00|Configuration of URL failed 0205082257|cfg |4|00|Prov|Could not download file 64167f5022c4-web.cfg 0205082257|cfg |4|00|Prov|Uploading phoneWeb.cfg failed 0205082257|cfg |4|00|Prov|Update configuration failed 0205082308|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'xxx.com' found no records 0205082308|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'xxx.com' found no records 0205082308|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'xxx.com' found no records 0205082308|sip |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=20 0205082308|sip |4|00|MakeTlsConnection: SSL_connect error 1 0205082308|sip |4|00|MakeTlsConnection: connection failed error -1 0205082308|sip |4|00|[TLS] Server Certificate Common Name '*.kasserver.com' doesn't match any of the following: 0205082308|sip |4|00|[TLS] Hostname: xxx.com 0205082308|sip |4|00|[TLS] Outbound Proxy: xxx.com 0205082308|sip |4|00|[TLS] Hostname connection: sipinternal.xxx.com 0205082308|sip |4|00|[TLS] Server Certificate SAN or CN validation failed 0205082308|sip |4|00|MakeTlsConnection: connection failed error 1 0205082308|sip |4|00|Registration failed User: marc.schneider, Error Code:480 Temporarily not available 0205082308|cfg |4|00|RT|pps is setting Login Credentials to valid for Reason[0] 0205082308|ldap |4|00|ldapCfg::initCfg: ldapCfg::initCfg for cid cmdLine 0205082308|ldap |4|00|ldapCfg::isDirFeatureEnabled: for 5 enabled 1 0205082309|dns |4|00|doDnsLookupForList: given NULL hostname 0205082309|ldap |4|00|ldap: Cfg Failed 0205082309|ldap |4|00|ldapAccess::dirAccessPmtWithCB:configuration failed 0205082320|apps |5|00|PolySettings: ssid = SSID1 0205082320|apps |5|00|PolySettings: prevSsid = SSID1 0205082320|apps |5|00|PolySettings: null != oldconfig 0205082323|cfg |4|00|RT|pps is setting Login Credentials to valid for Reason[0] 0205082325|auth |4|00|[StdRet COAuth2SmCtxt::OAuth2ParseAndSaveRequiredInfo(E_OAuth2ReqRspId)]:[1531] eReqRspID[6] m_RetVal[0] curlReturn[0] HttpRspCode[200] csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3600","ext_expires_in":"3600","expires_on":"1549358606","not_before":"1549354706","resource":"https://webdirde1.online.skype.de/","pwd_exp":"779411","pwd_url":"https://portal.microsoftonline.com/ChangePassword.aspx","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImhtWE1lTkxmMj 0205082325|auth |4|00|eReqRspID[17] HttpCode[480] message[] 0205082325|auth |4|00|Retry Cnt[0] pHD(140)AuthServiceCallerWbad https://webdirde1.online.skype.de/WebTicket/WebTicketService.svc
Message 1 of 2
1 REPLY 1
Highlighted
Polycom Employee & Community Manager

Re: Trio 8800 Skype for Business Sign-In Certificate Error

Hello @marc.schneider ,

Your post ended up in the Spam Filter so I moved this here.

 

I have highlighted the problem but we would need more details. I suggest you start looking at:

 

Jan 17, 2017 Question:How can I troubleshoot simple Skype for Business, LYNC or Office365 issues?

Resolution: Have a look => here <=


Best Regards

Steffen Baier




<======== Signature / Disclaimer ========>
Please be aware:For questions about the type of support to expect please check here

Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

Please remember, if you see a post that helped you , and it answers your question, please mark it as an "Accept as Solution".

The title Polycom Employee & Community Manager is an automatic setting within the community and any forum reply or post is based upon my personal experience and does not reflect the opinion or view of my employer.
Poly employee participation within this community is not mandatory and any post or FAQ article provided by myself is done either during my working hours or outside working hours, in my private time, and maybe answered on weekends, bank holidays or personal holidays.
Message 2 of 2