Skype for Business (Lync) – Easiest way to add trusted root certificate authorities to Edge
Sep17

Skype for Business (Lync) – Easiest way to add trusted root certificate authorities to Edge

Ok here is a little tip when trying to add trusted root certificate authorities to Skype for Business 2015 and Lync 2010/2013 Edge servers. Microsoft have a list of Unified Communications Certificate Providers detailed here: https://support.microsoft.com/en-us/kb/929395 Windows now automatically downloads Trusted Root certificates when you access a web page on HTTPS.  We can exploit this to get all Trusted Root certificates on our...

Read More
Lync – Office 365 Federation Presence Unknown
Apr02

Lync – Office 365 Federation Presence Unknown

A customer was having problems with their Lync 2010 deployment federating with Office 365.  When searching for a Lync Online user they would see “Presence Unknown” and be unable to send Instant Messages.  They could Federate with other On-Prem Lync organisations OK.  They had LyncOnline configured as a Hosted Provider and Partner Domain Discovery Enabled (Dynamic Federation).  Their _sipfederationtls._tcp DNS record was...

Read More
Lync – Unable to sign in via Edge (Checkpoint Firewalls)
Mar24

Lync – Unable to sign in via Edge (Checkpoint Firewalls)

I recently ran into a problem with Checkpoint Firewalls on a Lync 2010 deployment.  The customer already had a single 2010 Front End and wished to enable external sign in over the internet as it did not work over their VPN solution (Direct Access).  I installed the Edge server and Reverse Proxy but then encountered a strange issue where I was unable to sign in over the Edge server.  Some of the troubleshooting steps I took (Thinking...

Read More
Lync – Increase Internal Certificate Validity Period
Feb24

Lync – Increase Internal Certificate Validity Period

When you deploy Lync and assign internal certificates to your Lync servers (E.g. Front End, Internal Edge, SBA and Gateways) by default you will only have a 2 year certificate from the “Web Server” template. I like to create a new Certificate Template for Lync with a 5 year lifespan as it can be quite annoying having to renew certificates, especially on the Edge servers and Gateways where you have to export the cert...

Read More
Lync Tip: Quickly restart all Lync services using PowerShell
Jan10

Lync Tip: Quickly restart all Lync services using PowerShell

You need to restart all Lync services, open services.msc and see 10+ Lync Server services.  Rather than go through each one hitting the stop or restart button with your mouse you can use PowerShell! Stop all Lync Services: PowerShell Stop-CsWindowsService 1 Stop-CsWindowsService Start all Lync Services: PowerShell Start-CsWindowsService 1...

Read More