Symptom: The Front End service would not start due to incorrectly placed certificates in the Trusted Root container. This script https://gallery.technet.microsoft.com/LyncSkype4B-Certificate-81944851 was used to check the certificate containers and two root certificates were found incorrectly placed in the Trusted Root container. Example output:- Resolution: The below registry...
To resolve the Poodle vulnerability and harden the Edge Server download and install the following tool from Nartac Software https://www.nartac.com/Products/IISCrypto/Download After installing select ‘best practices’ and apply the suggested fixes. The keys will be written to the following path: “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control \SecurityProviders\SCHANNEL\Protocols” Browse to Qualys SSLs checker and scan the Edge...
Summary: After initiating a successful failover of the Central Management Store and Pool failback of the CMS failed. The topology reported the CMS as being homed on the primary pool, but the Get-CsManagementStoreReplicationStatus –CentralManagementStoreStatus cmdlet reported the CMS as still being on the backup pool....
Summary: The topology consisted of Skype for Business Server deployed alongside Direct Access. To preserve call quality ALL SfB traffic was not be tunnelled by DA or any other solution that deployed a VPN secure tunnel as did the Blue Coat Unified Agent. The following article...
SfB OpenOTP MFA integration using Passive Authentication The following is supplemental to the WebADM Install Guide only. Server specification Ubuntu 12.04 was used for the integration using a Basic_A1 (1 core, 1.75 GB memory) VM. The server was installed manually to support installation of OpenOTP in Azure. Otherwise...
Skype for Business Online Intune Conditional Access Integration Intune provides the following integration for SfB Online (O365):- • MDM • MAM using app policies and conditional access • ADAL authentication Enable CA in SfB Online Policy in Intune. CA is not supported for Windows Phone. App policy support is only...
Skype for Business Unleashed I had the pleasure of being a contributing writer along with the other writers below for the newly released publication Skype for Business Unleashed (12/8/2016). I’m quite familiar with the unleased series of books having used Exchange 2007, 2010 and Lync 2010, 2013...