Skype for Business Client Certificate Store

Hi Everyone,

We have just rolled out Skype for Business (O365) and have discovered that when logging in, SfB puts a client authentication certificate in the Users Personal Certificate Store. This is troublesome for us because we use client authentication certificate to secure things like Remote Access. Users are now being prompted with a certificate prompt identical to this blog post:

I've tried the steps described in the blog post which looks super promising but alas, the certificates are still generated in the Personal Store instead of the intended LyncCertStore...

Has anyone else worked with Lync or Skype for Business and managed to get around this issue or have any insights for us?

Thanks in advance,

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Vasil Michev (MVP)Commented:
Works fine for me. I used the \15.0 path.
aroddickAuthor Commented:
Forgot to mention:

HKLM\SOFTWARE\Policies\Microsoft\Office\ key did not exist for me initially. I have tried to create the path (15.0 and 16.0 just in case) and the DWORD as described, no go. See attached screenshot (1.JPG).

The LyncCertStore itself has been created and is visible in certmgr.msc. Each time I "delete my sign-in info" I confirm the certificate has been removed (2.JPG). Each time I sign in again the certificate comes back in the Personal Store (3.JPG).

I hope I'm not missing something idiotic or just misreading something.

Vasil, would you mind including a screenshot of your registry and your certmgr.msc LyncCertStore please just so I can do a sanity check? Thanks for taking the time to test and comment.

Until I hear back I'll reinstall SfB and see if that changes anything for me.

Thanks again,

aroddickAuthor Commented:
Uninstalled. Rebooted. Reinstalled. Checked Registry and the HKLM\Software\Policies\Microsoft\Office\ Key does not exist again (5.jpg)

I have tried adding in the UseLyncCertStore DWORD to HKLM\Software\Microsoft\Office\Lync\15.0\ as an alternate (existing) path but no go (6.jpg)

Any ideas what on earth I'm doing wrong?

Thanks again for your time.

CompTIA Cloud+

The CompTIA Cloud+ Basic training course will teach you about cloud concepts and models, data storage, networking, and network infrastructure.

aroddickAuthor Commented:
PS. I've checked all of these settings under the WoW6432Node structures as well to no avail.
Vasil Michev (MVP)Commented:
Well if the key disappears, there's something more to your setup I guess. Are you using Citrix or App-V or similar?

Here are my screens, I didnt even have to clear the credentials in Lync to get it to work, just restarted the client. registrycert

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
aroddickAuthor Commented:
Edit - my final update: I uninstalled, rebooted, added the registry key manually and THEN installed SfB - it is now working, placing the certificate in the correct LyncCertStore.Certificate Store.

Not really a solution per se but it was good to have a sounding board and someone to test with. Thanks for your help mate!

Sincere Thanks,

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Office 365

From novice to tech pro — start learning today.