Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1343
  • Last Modified:

Lync and unified Messaging server

I have received the following on my Exchange server 2010. Any idea ?
10.0.x.81 is the Exchange
10.0.x.41 is the Lync server

The Unified Messaging server failed to exchange the required certificates with an IP gateway to enable Transport layer Security (TLS) for an incoming call. Please check that this is a configured TLS peer and that the certificates being used are correct. More information: A TLS failure occurred because the remote server disconnected while TLS negotiation was in progress. The error code = 0x80131500 and the message = Unknown error (0x080131500). Remote certificate: (). Remote end point: 10.0.x.81:5061. Local end point: 10.0.x.41:55181.
0
AXISHK
Asked:
AXISHK
  • 2
  • 2
1 Solution
 
Jeff_SchertzCommented:
Make sure that the Exchange UM server FQDN is defined as the Common Name of the SSL certificate which is bound to the UM service, otherwise your Lync Server will not be able to establish a TLS session with Exchange.

Quite often a single certificate is used on the Exchange server with something like 'mail.domain.com' as the CN yet the server FQDN (e.g. exchange.domain.com) is included in the SAN field.  For all other usages this is fine, but not for Lync+EUM.

To resolve either request a new certificate with exchange.domain.com as the CN and then move the mail.domain.com or whatever the CN was into the SAN field.  Or you can request a second certificate to bind to ONLY the UM service and simply put the Exchange FQDN in the CN field and do not use any SAN field at all.

The problem is that Lync Server only looks at the CN and ignore the SAN field os the certificate bound to the Exchange UM service, and the CN must match the Exchange Um server FQDN as it was resolved by the Lync Server.
0
 
AXISHKAuthor Commented:
"Make sure that the Exchange UM server FQDN is defined as the Common Name of the SSL certificate which is bound to the UM service, otherwise your Lync Server will not be able to establish a TLS session with Exchange."

Where can I check which UM service is used in Lync ?

Tks
0
 
Jeff_SchertzCommented:
You can use the Get-ExchangeCertificate cmdlet in the Exchange Management Shell:
http://technet.microsoft.com/en-us/library/bb124950(v=exchg.150).aspx

Look for th certificate which is enabled for the 'UM' service than look at its configuration to verify that the CN/SAN setup is correct for Lync or not.

See this article and the posted comments for similar discussions:
http://blog.schertz.name/2010/11/lync-and-exchange-um-integration
0
 
AXISHKAuthor Commented:
Tks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now