locked
Android app displaying wrong certificate at sign-in RRS feed

  • Question

  • Hi all,

    I'm not sure how long this has been a problem but when I try to login to our Skype for Business server using the Android app I receive the following:

    "Security Warning: A server presented a certificate that could not be verified.  Do you wish to continue?"

    The odd thing is that the warning displays details of the certificate we use on our main website, not the Skype for Business server.  Why might this be?  I can ignore the warning and login and everything works fine.

    Any help would be great.

    Graham 

    Tuesday, March 21, 2017 12:01 PM

All replies

  • it seems that root CA certificate isn't installed on Android phone. you can try to import it to the phone and check again
    Tuesday, March 21, 2017 12:52 PM
  • Hi,

    are you signing in from internal network?

    If so then it should hit SFB frontend pool certificate. Is certificate for your main website internal signed certificate?


    Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2work

    Tuesday, March 21, 2017 1:31 PM
  • I am signing in over the internet on my phone via cellular network.

    Regarding not having the root ca certificate installed on the phone I could perhaps understand it if it was at least showing the correct certificate but it's showing the wrong one!  It shows the details for the certificate used on our main website, which also shares the same domain.  Most odd!

    Tuesday, March 21, 2017 2:03 PM
  • Please check our DNS requirement for SFB. What are you using as reverse proxy?


    Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2work

    Tuesday, March 21, 2017 2:38 PM
  • Thanks.  We are using a KEMP Loadmaster.  We have a single edge and a single internal standard server.  Both are S4B 2015.
    Tuesday, March 21, 2017 2:42 PM
  • what about other mobile devices?

    check you public dns - lyncdiscover and external web services must be set to Reverse Proxy external ip address.

    and reverse proxy must be configured to proxy infoming traffic 443 tcp to 4443 tcp on FE and 80 tcp to 8080 tcp on FE

    run Lync tests at exrca: https://testconnectivity.microsoft.com/

    Tuesday, March 21, 2017 2:45 PM
  • Hi BirtyBassett,

    Did the issue appear on all users in your environment?

    If all users had this issue, please try to renew certificate for your SFB server, then test again, the following document is for your reference
    https://blogs.technet.microsoft.com/uclobby/2013/09/16/renewing-lync-server-20102013-certificates/


    Regards,

    Alice Wang


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, April 26, 2017 2:37 AM
  • Hi Graham, did you find a solution for the certificate problem? I'm experiencing the same issue on all of our Android devices but not our iPhones. We are using Office 365 without local Skype server.

    Would really appreciate to hear how things turned out for you.

    /Nicklas

     
    Tuesday, December 19, 2017 6:17 AM
  • Hi Graham, 

    did you ever got this working, 

    i am having the same issue and can't find a solution for it...

    Monday, February 12, 2018 2:16 AM