
Skype For Business 2016 Certificate Error Install Skype For
Skype for Business makes it easy to connect and collaborate with coworkers and business partners around the world: Start instant message conversations and voice or video calls. Such certificates are used when integrating Pexip Infinity with Microsoft Skype for Business and Lync , either as part of an on-.Download and install Skype for Business on Windows. Install the latest updates to Outlook and Office 2016, to see if there are any new fixes.When adding a new Skype for Business server to an existing topology, I came across the following error statement whilst trying to request a certificate from the internal certificate authority:509 SSL/TLS certificates. Uninstall the KB4018326 update, if it is causing issues. Clear the Lync cache, by deleting the SIP folder and files in the Tracing folder. In summary, the following solutions should prevent Skype for Business crashing on start up.

You can check the values by browsing to the following locations using the registry editor: HKLM:\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration\”CA NAME”The two entries you need to be concerned with are: First checking the certificate template used, I could establish that the validity period of the template was 3 years.Next, I decided I would double check the root certificate had not expired, as you can see from the screen shot, it is within it’s validity periodNext on the list of advices from the error was to check the registry validity period on the certificate authority server. I decided to perform some due diligence checking against what was currently configured. Symptoms 1st Symptom: User Complaints 2nd Symptom: Your exchange logs the following event:The problem is down to a configuration issue with the certificate authority used for the request. A simple click or two, and boom new certificate Unless you have integrated Skype for Business IM into your OWA.
10The restart the certificate authority services for the changes to take effect.If you are not confortable with the registry editor method, you can alternatively use CERTUTIL to achieve this.Open Command Prompt as an elevated administrator and type: certutil –getreg CA\ValidityPeriodAnd certutil –getreg CA\ValidityPeriodUnitsThese commands will output the current configured values:To change the value of the validity period type the following command: certutil –setreg CA\ValidityPeriodUnits 10(where 10 is the number of units you want to set)Again, restart the certificate authority service for these changes to take effect.Once changed you will be able to request your Skype for Business certificates once more. Change the ValidityPeriodUnits value to a higher number e.g. ValidityPeriodUnits – This will be the number of units in the period set by the Validity Period (in my case: 2 Years)By default, the registry validity period is set to two years.As we can see, there is a discrepancy in the certificate template specifying a 3 year validity period, whilst the registry on the CA server has set a maximum of 2 years.Changing the registry validity period to a higher or same value as the template is the recommended resolution to this error.
