Trio 8800 Skype for Business Sign-In Certificate Error

Occasional Visitor

Trio 8800 Skype for Business Sign-In Certificate Error

Hi,

 

I am having trouble Signing in to Skype for Business on the Trio 8800.

Software Version: 5.8.0.15024
Base Profile: SfB

I try to log in to skype with Sign-in Address/User my email and password, Domain is empty.
I get the error "Failed to fetch root certificate".

 

I have set the following DNS entries on my server:
name                          type          data
lyncdiscover               CNAME    webdir.online.skype.de.
sipdir                          CNAME    sipdir.online.skype.de.
_sip._tls                      SRV         100 1 443 sipdir.online.skype.de.
_sipfederationtls._tcp SRV         100 1 5061 sipfed.online.skype.de.

 

Am i missing more DNS settings?
What is the issue here?


The log entries:

https://webdirde1.online.skype.de/WebTicket/WebTicketService.svc/cert
https://login.microsoftonline.de/common/oauth2/authorize https://webdirde1.online.skype.de/WebTicket/WebTicketService.svc/OAuth https://webdirde1.online.skype.de/WebTicket/WebTicketService.svc https://login.microsoftonline.de/common/oauth2/authorize http://nexus.microsoftonline-p-int.com/federationmetadata/2006-12/ 0205082253|wad |4|00|Not able to get WT from Auth Service 0205082253|sip |*|00|Sip Register Usr:marc.schneider@xxx.com Dsp:marc.schneider Auth:'Using Login Cred' Inx:0 0205082253|utilm|4|00|uBLFUnCompressed: File /data/polycom/ffs0/Config/Local/WebTicket/0/sip.usr doesn't exist or is empty 0205082253|utilm|4|00|uBLFUnCompressed: File /data/polycom/ffs0/Config/Local/WebTicket/0/sip.usr doesn't exist or is empty 0205082257|copy |4|00|Configuration of URL failed 0205082257|cfg |4|00|Prov|Could not download file 64167f5022c4-web.cfg 0205082257|cfg |4|00|Prov|Uploading phoneWeb.cfg failed 0205082257|cfg |4|00|Prov|Update configuration failed 0205082308|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'xxx.com' found no records 0205082308|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'xxx.com' found no records 0205082308|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'xxx.com' found no records 0205082308|sip |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=20 0205082308|sip |4|00|MakeTlsConnection: SSL_connect error 1 0205082308|sip |4|00|MakeTlsConnection: connection failed error -1 0205082308|sip |4|00|[TLS] Server Certificate Common Name '*.kasserver.com' doesn't match any of the following: 0205082308|sip |4|00|[TLS] Hostname: xxx.com 0205082308|sip |4|00|[TLS] Outbound Proxy: xxx.com 0205082308|sip |4|00|[TLS] Hostname connection: sipinternal.xxx.com 0205082308|sip |4|00|[TLS] Server Certificate SAN or CN validation failed 0205082308|sip |4|00|MakeTlsConnection: connection failed error 1 0205082308|sip |4|00|Registration failed User: marc.schneider, Error Code:480 Temporarily not available 0205082308|cfg |4|00|RT|pps is setting Login Credentials to valid for Reason[0] 0205082308|ldap |4|00|ldapCfg::initCfg: ldapCfg::initCfg for cid cmdLine 0205082308|ldap |4|00|ldapCfg::isDirFeatureEnabled: for 5 enabled 1 0205082309|dns |4|00|doDnsLookupForList: given NULL hostname 0205082309|ldap |4|00|ldap: Cfg Failed 0205082309|ldap |4|00|ldapAccess::dirAccessPmtWithCB:configuration failed 0205082320|apps |5|00|PolySettings: ssid = SSID1 0205082320|apps |5|00|PolySettings: prevSsid = SSID1 0205082320|apps |5|00|PolySettings: null != oldconfig 0205082323|cfg |4|00|RT|pps is setting Login Credentials to valid for Reason[0] 0205082325|auth |4|00|[StdRet COAuth2SmCtxt::OAuth2ParseAndSaveRequiredInfo(E_OAuth2ReqRspId)]:[1531] eReqRspID[6] m_RetVal[0] curlReturn[0] HttpRspCode[200] csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3600","ext_expires_in":"3600","expires_on":"1549358606","not_before":"1549354706","resource":"https://webdirde1.online.skype.de/","pwd_exp":"779411","pwd_url":"https://portal.microsoftonline.com/ChangePassword.aspx","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImhtWE1lTkxmMj 0205082325|auth |4|00|eReqRspID[17] HttpCode[480] message[] 0205082325|auth |4|00|Retry Cnt[0] pHD(140)AuthServiceCallerWbad https://webdirde1.online.skype.de/WebTicket/WebTicketService.svc
Message 1 of 2
1 REPLY
Polycom Employee & Community Manager

Re: Trio 8800 Skype for Business Sign-In Certificate Error

Hello @marc.schneider ,

Your post ended up in the Spam Filter so I moved this here.

 

I have highlighted the problem but we would need more details. I suggest you start looking at:

 

Jan 17, 2017 Question:How can I troubleshoot simple Skype for Business, LYNC or Office365 issues?

Resolution: Have a look => here <=


Best Regards

Steffen Baier

Please be aware:

The purpose of these forums is to allow community members collaborate and help each other.
Questions posted here do not follow Polycom’s SLA guidelines.
If you require assistance from Polycom technical support, please open a
web service request or call us .

The above is necessary in order to track issue internally within Polycom.

You are welcome to post more questions or configuration or logs for other community members to look at but if your issue requires a fix via Polycom you must go via the official support structure.

Please ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

Please remember, if you see a post that helped you , and it answers your question, please mark it as an "Accept as Solution".

This forum reply or post is based upon my personal experience and does not reflect the opinion or view of my employer.
Polycom employee participation within this community is not mandatory and any post or FAQ article provided by myself is done either during my working hours or outside working hours, in my private time, and may be answered on weekends, bank holidays or personal holidays.
Message 2 of 2