none
Unable to Start Lync 2013 Standard Services

    Question

  • New single-server installation on Windows 2012 Server, after completing Step #4 'start services' of the Lync Deployment:

    Lync Server Services that do not Start:

    1. Lync Server Front-End
    2. Lync Server Application Sharing
    3. Lync Server Audio/Video Conferencing
    4. Lync Server IM Conferencing
    5. Lync Server Mediation
    6. Lync Server Web Conferencing

    --------------------

    Error attempting to start 'Lync Server Front-End' service:  "Windows could not start the Lync Server Front-End on Local Computer.  For more information, review the System Even Log.  If this is a non-Microsoft service, contact the service vendor, and refer to the service-specific error code -1008124830"

    System Log Error (Event ID's 7024 & 7034): "The Lync Server Front-End service terminated with the following service-specific error: %%3286842466"

    Wednesday, February 13, 2013 8:07 PM

Answers

  • Hi,

    The certificate for front end must include Internal web FQDN (which is the same as the FQDN of the server). Here is certificate requirement for internal servers:

    http://technet.microsoft.com/en-us/library/gg398094.aspx


    Kent Huang
    TechNet Community Support

    • Marked as answer by Bobby Bubbles Wednesday, February 20, 2013 6:39 PM
    Monday, February 18, 2013 2:44 AM
  • New single-server installation on Windows 2012 Server, after completing Step #4 'start services' of the Lync Deployment:
    --------------------

    Error attempting to start 'Lync Server Front-End' service:  "Windows could not start the Lync Server Front-End on Local Computer.  For more information, review the System Even Log.  If this is a non-Microsoft service, contact the service vendor, and refer to the service-specific error code -1008124830"

    System Log Error (Event ID's 7024 & 7034): "The Lync Server Front-End service terminated with the following service-specific error: %%3286842466"

    Make sure you don't have intermediate certificates in the root store and "root certificates" in the intermediate store. There was a KB article, but I cannot find it for the moment.
    • Marked as answer by Bobby Bubbles Wednesday, February 20, 2013 6:39 PM
    Wednesday, February 20, 2013 5:47 PM

All replies

  • Can you check if you have you internal CA chain in your trusted root certification authority?

    Thank you.



    Please “Vote As Helpful” and/or “Mark As Answer” if this post helped you.

    Wednesday, February 13, 2013 8:29 PM
  • No, I do not see the Internal CA Chain on the Trusted Root Certification Authority.  Would I only need to import the *.cer provided by DigiCert ?
    Wednesday, February 13, 2013 8:41 PM
  • Do you have internal CA on your networks?  You have to have it and you have to export the Internal Root.

    In addition, if you use Digicert on that server, go to http://www.digicert.com/util/ Click on Download button, select Open and run DigiCertUtil.exe.  Click on Repair button. It should fix any issues with DigiCert certificate.

    Thank you.



    Please “Vote As Helpful” and/or “Mark As Answer” if this post helped you.

    Wednesday, February 13, 2013 8:46 PM
    1. There is no internal CA on the network, only using a Public CA.  You're saying this is a requirement for Lync?
    2. Ran DigiCertUtil.exe which reports "DigiCert root and intermediate certificates are installed Correctly".  The certificate is correctly displayed with a green check mark.
    Wednesday, February 13, 2013 8:55 PM
  • Sorry, I did not mean that Internal CA required.  I meant that root CA should be in Trusted Authority.

    Thank you.



    Please “Vote As Helpful” and/or “Mark As Answer” if this post helped you.

    Wednesday, February 13, 2013 8:59 PM
  • Thanks again Igor, so then you are suggesting to import the root CA (MyLync.mydomain.com) for example?
    Wednesday, February 13, 2013 9:08 PM
  • If you do not have Internal CA and you do not use it with Lync, there is nothing for you to do.

    If you use DigiCert and that utility shows that you are OK, there is something else, not Certificate issue.

    Can you check if you have all Certificates assigned within Deployment Wizard?

    Thank you.



    Please “Vote As Helpful” and/or “Mark As Answer” if this post helped you.

    Wednesday, February 13, 2013 9:14 PM
  • All certificates are assigned within Deployment Wizard:

    • Default Certificate (Server default, Web Services Internal, Web Services External)
    • OAuthTokerIssuer
    Wednesday, February 13, 2013 9:20 PM
  •  Did you install a internal certificate for your internal services?

    Does your certificate contain all internal FQDN's for you lync enviroment?


    regards Holger Technical Specialist UC

    Wednesday, February 13, 2013 9:27 PM
    1. There is no internal CA, only using a Public CA (DigiCert)
    2. The DigiCert certificate does not contain the Lync Server Internal FQDN, lyncdiscoverInternal.mydomain.com or Lyncdiscover.mydomain.com according to the logs.  Are these required to start the Lync Services?


    Wednesday, February 13, 2013 9:32 PM
  • Hi,

    The certificate for front end must include Internal web FQDN (which is the same as the FQDN of the server). Here is certificate requirement for internal servers:

    http://technet.microsoft.com/en-us/library/gg398094.aspx


    Kent Huang
    TechNet Community Support

    • Marked as answer by Bobby Bubbles Wednesday, February 20, 2013 6:39 PM
    Monday, February 18, 2013 2:44 AM
  • New single-server installation on Windows 2012 Server, after completing Step #4 'start services' of the Lync Deployment:
    --------------------

    Error attempting to start 'Lync Server Front-End' service:  "Windows could not start the Lync Server Front-End on Local Computer.  For more information, review the System Even Log.  If this is a non-Microsoft service, contact the service vendor, and refer to the service-specific error code -1008124830"

    System Log Error (Event ID's 7024 & 7034): "The Lync Server Front-End service terminated with the following service-specific error: %%3286842466"

    Make sure you don't have intermediate certificates in the root store and "root certificates" in the intermediate store. There was a KB article, but I cannot find it for the moment.
    • Marked as answer by Bobby Bubbles Wednesday, February 20, 2013 6:39 PM
    Wednesday, February 20, 2013 5:47 PM
  • My certificates are ok but I still get the service-specific error 1008124830. I also did a new post on this here.
    Monday, June 03, 2013 10:13 AM