locked
Skype for Business sign-in fails with KB 3115261 RRS feed

  • Question

  • Several of our users running the Office 2013 version of Skype for Business are reporting issues signing in after installing KB 3115261. Other users are reporting issues with Office 2016 click-to-run Skype for Business with the latest update. In both cases, on sign-in the user is presented with the error:

    "Can't sign in to Skype for Business. There was a problem verifying the certificate from the server."

    Examination of their client logs shows the following:

    D6C:F78 ERROR :: SECURE_SOCKET: negotiation failed: 80090325, principal name: [(lync edge server)]

    D6C:B00 ERROR :: CSIPTransportLayerSecurity::OnTlsNegotiationComplete (10A71138) failed with 0x80ee00ca. Raising OnConnect with the same error
    D6C:B00 ERROR :: CSIPTransportLayerSecurity::OnTlsNegotiationComplete (10A71138) failed with 0x80ee00ca. Raising OnConnect with the same error
    D6C:B00 ERROR :: CSIPClientConnection::OnConnect (80ee00ca) this: 1A250A18
    D6C:B00 INFO  :: SIP_MSG_PROCESSOR::OnRequestConnectionConnectComplete - Enter this: 10C8F730, callid=(null), ErrorCode: 0x80ee00ca
    D6C:B00 ERROR :: Releasing connection and notifying transactions

    Verification of the site certificate using certutil -f -verify -urlfetch (certificate file) shows no error in the certificate chain on the client PC.

    Removal of the KB and a restart immediately resolves the issue.

    Thursday, July 28, 2016 10:30 PM

All replies

  • Hi,

    I'm moving this one to the dedicated Skype for Business forum for further assistance, there you should get more professional responses:

    https://social.technet.microsoft.com/Forums/office/en-US/home?forum=sfbfr

    The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Friday, July 29, 2016 10:25 AM
  • really wondering with the behavior, few of my colleagues got installed this version and i too installed this version for testing sake, no issues reported.

    lets do onething, after installing the client can you reverify if the client is under antivirus execeptions list or not.

    disable all non-microsoft application and reboot the system and see if the behavior changes.

    from the internet explorer, advanced settings, uncheck certificate revocation check and try to signin again ?

    please post the details. if you would like to share uccapi logs can you share - you can replace your domain name if you want, full log will help us to understand in which process it failing.

    i think you already know about it before the request go to the FE server it will first check the TCP connectivity check and TLS connectivity check. just wanted to understand where exactly its failing.



    Regards, Rajukb | MCSE (Communication ), MCSA (o365) ,Certified "Lync server 2013 depth support engineer"| This posting is providedwith no warranties and confers no rights. If my reply answers your question please mark as answer/helpful if its helpful.

    • Proposed as answer by Alice-Wang Monday, August 1, 2016 8:41 AM
    • Unproposed as answer by Kabacus Monday, August 1, 2016 5:19 PM
    Friday, July 29, 2016 1:30 PM
  • The program is not affected by AV. This still happens when running the program with no other programs running, and both certificate revocation checks in internet settings unchecked. TCP and TLS connectivity checks to the front end server work normally, and neither Internet Explorer nor any third party browser raises any issue with the certificate as presented. Sign-in logs are as follows:

    08/01/2016|09:59:08.373 2BE0:31BC INFO  :: CUccServerEndpoint::Initialize - This endpoint is  sharing presentity data.
    08/01/2016|09:59:08.373 2BE0:31BC INFO  :: CUccEndpoint::put_TelephonyTypewrite - Set TTY enabled to false
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: UCCP:ClientAllowedAuthProts0x1000c
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: CUccServerSignalingSettings::put_AllowedHttpProxyAuthenticationModes set auth modes 0x3f
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: CUccServerSignalingSettings::put_AllowedHttpProxyAuthenticationModes Basic Authentication enabled on MediaPlatform
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: CUccDnsResolverManager::Start MR-INFO - [00B342C0] DNS resolver manager started
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: UCCP:NegotiatedAuthProt0x0
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: UCCP:ServerAuthProts0x0
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: CUccPrincipalServerEndpoint::GetSipProviderProfile - Found no http proxy creds
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: SIP_ENDPOINT::SetSipAuthBroker (122B9230) _IUccSipAuthBroker(0x00000000)
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: UCCP:ServerAuthProts0x0
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: SIP_AUTH(122b988c) PrepareAuth at state: 0
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: SIP_REGISTER:State (0) => (1)
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: Outgoing 123C0628-<sip:kwillson@abacusgroupllc.com>, local=(null)
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: Function: StringToSockAddress
    08/01/2016|09:59:10.257 2BE0:31BC ERROR :: HRESULT failed: 80072726 = HRESULT_FROM_WIN32(::ShimWSAGetLastError()) . Failed to convert string IP to SOCKADDR
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: Created Async workitem 123F60FC, txn timeout 0, time sensitive 0, txn (00000000)
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: Out trxn corr-id (12324FA0)
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: SIP_MSG_PROCESSOR::GetLocalConnectionAddrSubnet get loca IP address returned NULL
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: SIP_MSG_PROCESSOR::GetSubnetHeader Invalid subnet -1
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: REGISTER_CONTEXT(123c0628) SetAndNotify Recv(4) at State (0)
    08/01/2016|09:59:10.257 2BE0:31BC INFO  :: REGISTER_CONTEXT:State (0) => (4)
    08/01/2016|09:59:10.257 2BE0:289C INFO  :: Function: StringToSockAddress
    08/01/2016|09:59:10.257 2BE0:289C ERROR :: HRESULT failed: 80072726 = HRESULT_FROM_WIN32(::ShimWSAGetLastError()) . Failed to convert string IP to SOCKADDR
    08/01/2016|09:59:10.337 2BE0:31BC TRACE :: SIP_MSG_PROCESSOR::OnDnsResolutionComplete[123C0628] Entered host (LYNC EDGE SERVER)
    08/01/2016|09:59:10.337 2BE0:31BC TRACE :: SIP_MSG_PROCESSOR::OnDnsResolutionComplete get DNS result server: (LYNC EDGE SERVER) IP: (REMOTE IP):5061
    08/01/2016|09:59:10.337 2BE0:31BC INFO  :: Use proxy server cache:1
    08/01/2016|09:59:10.337 2BE0:31BC INFO  :: Remote Addr: (REMOTE IP)
    08/01/2016|09:59:10.337 2BE0:31BC INFO  :: Verification Flags: 1
    08/01/2016|09:59:10.337 2BE0:31BC INFO  :: Interface Index: 4
    08/01/2016|09:59:10.337 2BE0:31BC INFO  :: Interface Type: 0
    08/01/2016|09:59:10.339 2BE0:31BC INFO  :: GetAdaptersAddresses Succeeded.
    08/01/2016|09:59:10.340 2BE0:31BC INFO  :: Identified local Ipv4 address: (LOCAL IP)
    08/01/2016|09:59:10.340 2BE0:31BC INFO  :: Found local routable Ipv4 address for SIP proxy server from proxy address list
    08/01/2016|09:59:10.340 2BE0:31BC INFO  :: SockMgr: Create New Connection:DestName:((LYNC EDGE SERVER))DestPort:(5061)Transport:(2)httpTunnel:(0)TLS RemotePrincipalName:((LYNC EDGE SERVER))
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: DestAddr :(REMOTE IP):5061

    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPTransportLayer::CSIPTransportLayer - [0x06F17730]
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPTransportLayerNotify::CSIPTransportLayerNotify - [0x06F17738]
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: SSIPTransportContext::SSIPTransportContext - [0x06F17768]
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: SSIPTransportContext::SSIPTransportContext - [0x0078E810]
    08/01/2016|09:59:10.340 2BE0:31BC ERROR :: CSIPClientConnection::AttachLyntrix no instance of CLyntrixClient
    08/01/2016|09:59:10.340 2BE0:31BC ERROR :: CSIPClientConnection::Initialize AttachLyntrix failed hr=80004005
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPTransportLayer::CSIPTransportLayer - [0x122E53D0]
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPTransportLayerNotify::CSIPTransportLayerNotify - [0x122E53D8]
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPAsyncSocket::CSIPAsyncSocket - [0x122E53D0]
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPAsyncSocket::Initialize - [0x122E53D0]
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPTransportLayer::CSIPTransportLayer - [0x0A13A378]
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPTransportLayerNotify::CSIPTransportLayerNotify - [0x0A13A380]
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPTransportLayerSecurity::CSIPTransportLayerSecurity - [0x0A13A378]
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPTransportLayer::CSIPTransportLayer - [0x1233BD18]
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPTransportLayerNotify::CSIPTransportLayerNotify - [0x1233BD20]
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPCompression::CSIPCompression - [0x1233BD18]
    08/01/2016|09:59:10.340 2BE0:31BC INFO  :: CSIPCompressor::Initialize - Compression setting 1, threshold 128000, timeout 5000
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPTransportLayerNotify::CSIPTransportLayerNotify - [0x12351020]
    08/01/2016|09:59:10.340 2BE0:31BC TRACE :: CSIPMessageCollator::CSIPMessageCollator - [0x12351020]
    08/01/2016|09:59:10.344 2BE0:31BC INFO  :: CAsyncSocketWin32::Connect 123C2A18 connecting(async) window 000805E6 socket:2290 DestAddr:(REMOTE IP):5061
    08/01/2016|09:59:10.344 2BE0:31BC ERROR :: CSIPAsyncSocket::Connect: HRESULT API failed: 80072733 = hr
    08/01/2016|09:59:10.344 2BE0:31BC TRACE :: SSIPTransportContext::~SSIPTransportContext - [0x0078E810]
    08/01/2016|09:59:10.344 2BE0:31BC INFO  :: deleting Async workitem 123F60FC
    08/01/2016|09:59:10.407 2BE0:31BC TRACE :: CSIPAsyncSocket::SetLocalAddr - [0x122E53D0]
    08/01/2016|09:59:10.407 2BE0:31BC TRACE :: CSIPAsyncSocket::SetRemoteAddr - [0x122E53D0]
    08/01/2016|09:59:10.407 2BE0:31BC TRACE :: CSIPAsyncSocket::SetNetworkId - [0x122E53D0]
    08/01/2016|09:59:10.407 2BE0:31BC INFO  :: Created Async workitem 1249A040, txn timeout 0, time sensitive 0, txn (00000000)
    08/01/2016|09:59:10.407 2BE0:31BC TRACE :: Async work item posted for TLS negotiation: this 0A13A378
    08/01/2016|09:59:10.407 2BE0:31BC TRACE :: CSIPAsyncSocket::Send this 122E53D0, sending pbSendBuf 0A3EA8C0, dwSendBufSize = 207
    08/01/2016|09:59:10.407 2BE0:31BC TRACE :: CSIPAsyncSocket::SendHelper - [0x122E53D0]
    08/01/2016|09:59:10.407 2BE0:31BC TRACE :: CAsyncSocketWin32::Send this 123C2A18, pbSendBuf 0A3EA8C0, dwSendBufSize = 207, dwBytesSent = 207
    08/01/2016|09:59:10.407 2BE0:31BC INFO  :: deleting Async workitem 1249A040
    08/01/2016|09:59:10.496 2BE0:31BC TRACE :: CSIPTransportLayerNotify::OnRecv - [0x122E53D8]
    08/01/2016|09:59:10.496 2BE0:31BC INFO  :: Created Async workitem 1249AA18, txn timeout 0, time sensitive 0, txn (00000000)
    08/01/2016|09:59:10.496 2BE0:31BC TRACE :: Async work item posted for TLS negotiation: this 0A13A378
    08/01/2016|09:59:10.496 2BE0:31BC TRACE :: CSIPTransportLayerNotify::OnRecv - [0x122E53D8]
    08/01/2016|09:59:10.496 2BE0:31BC TRACE :: CSIPTransportLayerSecurity::StartTlsNegotiationWorkitem TLS negotiation is in progress. Do not start another workitem, this 0A13A378
    08/01/2016|09:59:10.496 2BE0:31BC INFO  :: Created Async workitem 12499D70, txn timeout 0, time sensitive 0, txn (00000000)
    08/01/2016|09:59:10.496 2BE0:31BC TRACE :: Async work item posted for TLS negotiation: this 0A13A378
    08/01/2016|09:59:10.496 2BE0:31BC INFO  :: deleting Async workitem 1249AA18
    08/01/2016|09:59:10.597 2BE0:289C ERROR :: SECURE_SOCKET: negotiation failed: 80090325, principal name: [(LYNC EDGE SERVER)]
    08/01/2016|09:59:10.597 2BE0:31BC ERROR :: CSIPTransportLayerSecurity::OnTlsNegotiationComplete (0A13A378) failed with 0x80ee00ca. Raising OnConnect with the same error
    08/01/2016|09:59:10.597 2BE0:31BC ERROR :: CSIPClientConnection::OnConnect (80ee00ca) this: 06F17730
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: SIP_MSG_PROCESSOR::OnRequestConnectionConnectComplete - Enter this: 123C0628, callid=(null), ErrorCode: 0x80ee00ca
    08/01/2016|09:59:10.597 2BE0:31BC ERROR :: Releasing connection and notifying transactions
    08/01/2016|09:59:10.597 2BE0:31BC ERROR :: SIP_MSG_PROCESSOR::NotifyRequestConnectionConnectComplete - Error: 80ee00ca
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: CSIPAsyncSocket::Disconnect Shuttingdown 123C2A18
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: CSIPTransportLayerSecurity::Shutdown - [0x0A13A378]
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: CSIPMessageCollator::~CSIPMessageCollator - [0x12351020]
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x12351020]
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x1233BD20]
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: CSIPTransportLayer::~CSIPTransportLayer - [0x1233BD18]
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x0A13A380]
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: CSIPTransportLayer::~CSIPTransportLayer - [0x0A13A378]
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x122E53D8]
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: CSIPTransportLayer::~CSIPTransportLayer - [0x122E53D0]
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: SSIPTransportContext::~SSIPTransportContext - [0x06F17768]
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x06F17738]
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: CSIPTransportLayer::~CSIPTransportLayer - [0x06F17730]
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: deleting Async workitem 12499D70
    08/01/2016|09:59:10.597 2BE0:31BC ERROR :: OUTGOING_TRANSACTION::OnRequestConnectionConnectComplete - connection failed error 80ee00ca
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: REGISTER_CONTEXT:State (4) => (5)
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: REGISTER_CONTEXT(123c0628) SetAndNotify Recv(6) at State (5)
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: REGISTER_CONTEXT:State (5) => (6)
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: SIP_REGISTER:State (1) => (0)
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: CUccServerEndpoint::UpdateEndpointState - Update state from 1 to 0. Status 80EE00CA. Status text (null).
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: Function: CUccServiceOperationManager::DisableServManager
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: Condition failed with 80ee0061: 'm_fServMgrEnabled'
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: Function: CUccServerEndpoint::UpdateEndpointState
    08/01/2016|09:59:10.597 2BE0:31BC ERROR :: HRESULT API failed: 80ee0061 = hr. DisableServManager
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: CUccDnsResolverManager::Stop MR-INFO - [00B342C0] DNS resolver manager stopped
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: ~Out trxn corr-id (12324FA0)
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: Function: CUccEndpoint::Disable
    08/01/2016|09:59:10.597 2BE0:31BC TRACE :: Condition failed with 80ee0092: 'GetState() != UCCES_IDLE'
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: SIP_REGISTER::Unregistration already in unregister/ed state (0), this [122B9868]
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: SIP_STACK::DeleteSipEndpoint deleting sip endpoint 122B9230, this 0A132B58
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: SIP_ENDPOINT::Shutdown (122b9230) Shutdown
    08/01/2016|09:59:10.597 2BE0:31BC INFO  :: CUccDnsResolverManager::Stop MR-INFO - [00B342C0] DNS resolver manager stopped

    Monday, August 1, 2016 5:19 PM