Plantronics + Polycom. Now together as Poly Logo

Trio 8800 Skype for Business Sign-In Certificate Error

Highlighted
Occasional Visitor

Trio 8800 Skype for Business Sign-In Certificate Error

Hi,

 

I am having trouble Signing in to Skype for Business on the Trio 8800.

Software Version: 5.8.0.15024
Base Profile: SfB

I try to log in to skype with Sign-in Address/User my email and password, Domain is empty.
I get the error "Failed to fetch root certificate".

 

I have set the following DNS entries on my server:
name                          type          data
lyncdiscover               CNAME    webdir.online.skype.de.
sipdir                          CNAME    sipdir.online.skype.de.
_sip._tls                      SRV         100 1 443 sipdir.online.skype.de.
_sipfederationtls._tcp SRV         100 1 5061 sipfed.online.skype.de.

 

Am i missing more DNS settings?
What is the issue here?


The log entries:

https://webdirde1.online.skype.de/WebTicket/WebTicketService.svc/cert
https://login.microsoftonline.de/common/oauth2/authorize https://webdirde1.online.skype.de/WebTicket/WebTicketService.svc/OAuth https://webdirde1.online.skype.de/WebTicket/WebTicketService.svc https://login.microsoftonline.de/common/oauth2/authorize http://nexus.microsoftonline-p-int.com/federationmetadata/2006-12/ 0205082253|wad |4|00|Not able to get WT from Auth Service 0205082253|sip |*|00|Sip Register Usr:marc.schneider@xxx.com Dsp:marc.schneider Auth:'Using Login Cred' Inx:0 0205082253|utilm|4|00|uBLFUnCompressed: File /data/polycom/ffs0/Config/Local/WebTicket/0/sip.usr doesn't exist or is empty 0205082253|utilm|4|00|uBLFUnCompressed: File /data/polycom/ffs0/Config/Local/WebTicket/0/sip.usr doesn't exist or is empty 0205082257|copy |4|00|Configuration of URL failed 0205082257|cfg |4|00|Prov|Could not download file 64167f5022c4-web.cfg 0205082257|cfg |4|00|Prov|Uploading phoneWeb.cfg failed 0205082257|cfg |4|00|Prov|Update configuration failed 0205082308|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'xxx.com' found no records 0205082308|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'xxx.com' found no records 0205082308|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'xxx.com' found no records 0205082308|sip |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=20 0205082308|sip |4|00|MakeTlsConnection: SSL_connect error 1 0205082308|sip |4|00|MakeTlsConnection: connection failed error -1 0205082308|sip |4|00|[TLS] Server Certificate Common Name '*.kasserver.com' doesn't match any of the following: 0205082308|sip |4|00|[TLS] Hostname: xxx.com 0205082308|sip |4|00|[TLS] Outbound Proxy: xxx.com 0205082308|sip |4|00|[TLS] Hostname connection: sipinternal.xxx.com 0205082308|sip |4|00|[TLS] Server Certificate SAN or CN validation failed 0205082308|sip |4|00|MakeTlsConnection: connection failed error 1 0205082308|sip |4|00|Registration failed User: marc.schneider, Error Code:480 Temporarily not available 0205082308|cfg |4|00|RT|pps is setting Login Credentials to valid for Reason[0] 0205082308|ldap |4|00|ldapCfg::initCfg: ldapCfg::initCfg for cid cmdLine 0205082308|ldap |4|00|ldapCfg::isDirFeatureEnabled: for 5 enabled 1 0205082309|dns |4|00|doDnsLookupForList: given NULL hostname 0205082309|ldap |4|00|ldap: Cfg Failed 0205082309|ldap |4|00|ldapAccess::dirAccessPmtWithCB:configuration failed 0205082320|apps |5|00|PolySettings: ssid = SSID1 0205082320|apps |5|00|PolySettings: prevSsid = SSID1 0205082320|apps |5|00|PolySettings: null != oldconfig 0205082323|cfg |4|00|RT|pps is setting Login Credentials to valid for Reason[0] 0205082325|auth |4|00|[StdRet COAuth2SmCtxt::OAuth2ParseAndSaveRequiredInfo(E_OAuth2ReqRspId)]:[1531] eReqRspID[6] m_RetVal[0] curlReturn[0] HttpRspCode[200] csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3600","ext_expires_in":"3600","expires_on":"1549358606","not_before":"1549354706","resource":"https://webdirde1.online.skype.de/","pwd_exp":"779411","pwd_url":"https://portal.microsoftonline.com/ChangePassword.aspx","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImhtWE1lTkxmMj 0205082325|auth |4|00|eReqRspID[17] HttpCode[480] message[] 0205082325|auth |4|00|Retry Cnt[0] pHD(140)AuthServiceCallerWbad https://webdirde1.online.skype.de/WebTicket/WebTicketService.svc
Message 1 of 2
1 REPLY 1
Polycom Employee & Community Manager

Re: Trio 8800 Skype for Business Sign-In Certificate Error

Hello @marc.schneider ,

Your post ended up in the Spam Filter so I moved this here.

 

I have highlighted the problem but we would need more details. I suggest you start looking at:

 

Jan 17, 2017 Question:How can I troubleshoot simple Skype for Business, LYNC or Office365 issues?

Resolution: Have a look => here <=


Best Regards

Steffen Baier

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Message 2 of 2