Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

So - I am deploying a local install of Lync 2013. I have 1 standard server, 1 edge server, and 1 reverse proxy server using IIS ARR. I do not use NAT, each server has their own individual live external ip address. The standard server, the edge server, and the reverse proxy are all using the same certificate from GoDaddy. This is not a wildcard cert... just one with a lot of different SAN's. The edge server has an internal certificate requested from the local CA hosted on the domain controller which is Server 2008. The reverse proxy has the certificate of the CA in the trusted root certification authorities.

When hosting a meeting, the external user connects and then immediately disconnects. They can still chat, download documents, and use the whiteboard. The only thing that is not working is the video/app sharing.

Internal users work correctly whether using the lync application or the webapp.

On the standard server and the edge server, no errors are showing up in event viewer. On the reverse proxy server, I get schannel errors whenever the user tries to connect to the web meeting. I also get schannel errors on the client as well. The only helpful schannel error is Schannel 36874 from the reverse proxy with the following error,

An TLS 1.0 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed.

The errors on the client are not helpful. I have read a few posts with potential fixes but I haven't found anything yet. I have recently changed the CA to add a CRL point accessible through http access instead of the standard ldap method.

So - I am relatively positive this is an issue with a certificate but I am not sure which one... I have requested and reinstalled all certificates. I am assuming this means there is something wrong with the "defaults" that are being requested but I am completely out of ideas at the moment. Any thoughts?

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.