locked
Skype for Business.CMS not replicating to EDGE RRS feed

  • Question

  • Hi,

    We have updated all internal Certificate recently on all Skype for Business front end servers.CMS is replicating successfully with all FE Servers except Edge Servers.

    Environment :

    Skype for Business Server 2015 Front End Enterprise Pool

    Skype for Business Server 2015 Edge Enterprise Pool

    Operating System : Server 2012 R2

    We have opened all the necessary ports from the FE servers to the Edge servers and we can telnet from the FE Pool servers to the Edge servers on TCP port 4443. When we check the event logs on the FE server we see the below errors:

    "Skype for Business Server 2015, File Transfer Agent cannot send replication data to Replica Replicator on Edge"

    Skype for Business Server 2015, File Transfer Agent cannot get replication status from Replica Replicator Agent on Edge Edge machine: Edge01.domain.com Exception: System.ServiceModel.Security.MessageSecurityException: The HTTP request was forbidden with client authentication scheme ‘Anonymous’. —> System.Net.WebException: The remote server returned an error: (403) Forbidden. at System.Net.HttpWebRequest.GetResponse() at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout) — End of inner exception stack trace — Server stack trace: at System.ServiceModel.Channels.HttpChannelUtilities.ValidateAuthentication(HttpWebRequest request, HttpWebResponse response, WebException responseException, HttpChannelFactory`1 factory) at System.ServiceModel.Channels.HttpChannelUtilities.ValidateRequestReplyResponse(HttpWebRequest request, HttpWebResponse response, HttpChannelFactory`1 factory, WebException responseException, ChannelBinding channelBinding) at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout) at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout) at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout) at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation) at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message) Exception rethrown at [0]: at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) at Microsoft.Rtc.Xds.Replication.Common.IReplicationWebService.DownloadFiles(String senderFqdn, String sourceDirPath, String tempDirPath) at Microsoft.Rtc.Xds.Replication.FileTransfer.FileTransferTask.CopyFilesFromReplicaUsingWcf(String fromDir, String tmpDir, String toDir) Cause: Service may be unavailable or Network connectivity may have been compromised. Resolution: Verify that Replica Replicator Agent service is running on the Edge machine, network connectivity is available and TLS is configured correctly. For details, see http://support.microsoft.com/kb/2464556

     

    -James

     

    • Moved by Just Karl Thursday, February 2, 2017 9:39 PM Looking for the correct forum.
    Saturday, January 21, 2017 8:23 PM

All replies

  • Hello,

    The TechNet Sandbox forum is designed for users to try out the new forums functionality. Please be respectful of others, and do not expect replies to questions asked here.

    As it's off-topic here, I am moving the question to the Skype For Business forum.

    Karl

    Thursday, February 2, 2017 9:39 PM
  • Deleted
    Thursday, February 2, 2017 11:02 PM
  • Hi James,

    Please try to add the following key on FE and Edge server to check if the issue persist.

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL]
    "ClientAuthTrustMode"=dword:00000002

    Notice: we suggest you backup registry before you do the above steps.


    Best Regards,
    Jim Xu
    TechNet Community Support


    Please remember to mark the replies as answers if they helped.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Proposed as answer by jim-xu Monday, February 6, 2017 2:09 AM
    Monday, February 6, 2017 2:09 AM