locked
Unable to Sign into LYNC Phone using PIN RRS feed

  • Question

  • Hi,

    We have recently renewed the inetrnal lyncpool cert which had expired, since then we are no longer able to Sign into Lync phone using the PIN. Are theres any post steps that need to be completed after the cert has been renewed for this to work?

    I have the following commeand to Test "Test-CsPhoneBootstrap -PhoneOrExt xxxx -PIN xxxxx -Verbose"

    I can see a "Failed to get a web ticket" error

    See below for the Diagnosis (the user is and PIN are confirmed as Valid)

    TargetUri  : https://lyncpool01.Company.com:443/CertProv/CertProvisioningServic
                 e.svc
    TargetFqdn : lyncpool01.company.com
    Result     : Failure
    Latency    : 00:00:01.1479294
    Error      : Failed to get a web ticket.

    Diagnosis  :

    VERBOSE: Target server fqdn or web service url not provided. Will have to do
    DHCP Registrar Discovery.
    'DHCPDiscovery' activity started.
    Starting DHCP registrar discovery...
    DHCP discovery message send. Waiting for dhcp servers to respond.
    Response received for the DHCP Discovery message.
    Found registrar fqdn : lyncpool01.company.
    Found web service url :
    https://lyncpool01.company:443/CertProv/CertProvisioningService.svc.
    DHCP registrar discovery activity completed successfully.
    'DHCPDiscovery' activity completed in '1.0470918' secs.
    'STActivity' activity started.
    Trying to download a certificate chain from web service.
    Web Service url :
    http://lyncpool01.company/CertProv/CertProvisioningService.svc
    Certificate chain downloaded successfully.
    'STActivity' activity completed in '0.1008376' secs.
    'STActivity' activity started.
    Trying to get web ticket.
    Web Service url :
    https://lyncpool01.company:443/WebTicket/WebTicketService.svc
    Using PIN auth with Phone\Ext : XXXX Pin : 6XXXX
    Could not get a web ticket
    CHECK:
     - Web service url is valid and the web services are functional
     - If using PhoneNo\PIN to authenticate, make sure they match the user uri
     - If using NTLM\Kerberos auth, make sure you provided valid credentials
    Starting cleanup...
    An exception 'Failed to get a web ticket.' occurred during Workflow
    Microsoft.Rtc.SyntheticTransactions.Workflows.STPhoneBootstrapWorkflow
    execution.
    Exception Call Stack:    at
    Microsoft.Rtc.SyntheticTransactions.WebServicesHelper.GetWebTicket()
       at
    Microsoft.Rtc.SyntheticTransactions.Activities.GetWebTicketActivity.InternalExe
    cute(ActivityExecutionContext executionContext)
       at
    Microsoft.Rtc.SyntheticTransactions.Activities.STActivity.Execute(ActivityExecu
    tionContext executionContext)
       at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity,
    ActivityExecutionContext executionContext)
       at System.Workflow.ComponentModel.CompositeActivityExecutor`1.Execute(T
    activity, ActivityExecutionContext executionContext)
       at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(Activity
    activity, ActivityExecutionContext executionContext)
       at
    System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRunti
    me workflowCoreRuntime)
       at System.Workflow.Runtime.Scheduler.Run()

    'UnRegisterActivity' activity started.
    'UnRegisterActivity' activity completed in '0.0001029' secs.
    VERBOSE: Workflow Instance Id 64aa25a0-2d9b-4264-8f3a-b57f54213023, completed.
    VERBOSE: Workflow Execution Time (sec): 1.2959482

    Wednesday, January 6, 2016 9:51 AM

Answers

  • Hi,

    After revoke the certificate, if the issue persists, try to reset the IP Phone and then update to the latest firmware to test the issue again.

    Best Regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Eason Huang
    TechNet Community Support

    • Marked as answer by Eason Huang Thursday, February 11, 2016 10:11 AM
    Thursday, January 7, 2016 7:45 AM

All replies

  • Hi

    have you tried to revoke the device certificate so it requests a new one?

    revoke-csclientcertificate -Identity user@domain.com

    thanks

    mark


    Note: Please remember to `Mark as Answered` a post that answers your question and/or `Vote as Helpful` posts that have helped you. This will help others find answers to similar problems. For more Skype for Business help visit: http://www.skype4b.uk Please note that answers are based on my experience and opinion only and do not necessarily represent the views of my employer.

    • Proposed as answer by Eason Huang Thursday, January 7, 2016 7:44 AM
    Wednesday, January 6, 2016 1:15 PM
  • Hi,

    After revoke the certificate, if the issue persists, try to reset the IP Phone and then update to the latest firmware to test the issue again.

    Best Regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Eason Huang
    TechNet Community Support

    • Marked as answer by Eason Huang Thursday, February 11, 2016 10:11 AM
    Thursday, January 7, 2016 7:45 AM