none
Skype service won't started RRS feed

  • Question

  • Dear All,

    This below topology status on Skype for Business got warning, and some services are stopped & pending.

    You guys have solutions for this?

    Regards,
    Alu Ozy

    Thursday, September 12, 2019 5:43 PM

All replies

  • Hi Alu Ozy,

    Did it work before, or anything changed recently?

    I think you may first check if all the Skype for Business services are running, e.g. “Skype for Business Server Front-End” service.

    Then check the Lync server event viewer on both the servers, check if there is any related error. If exists, please provide the Event ID and error information.

    Sometimes, it may be related to incorrect certificate store location, run the following script to the server side and check if there is any item in the result txt file.

    Get-Childitem cert:\LocalMachine\root -Recurse | Where-Object {$_.Issuer -ne $_.Subject} | Format-List * | Out-File "c:\computer_filtered.txt"

    If any item exists, check the certificate is installed in the current store location, make sure “Trusted Root Certification Authorities” store only contains self-signed certificates.

    Here is a similar case you could refer to:

    https://social.technet.microsoft.com/Forums/lync/en-US/908c64f3-23cd-40f0-ae5d-e7eb20083773/registrar-and-userserver-is-not-starting-and-working-in-a-migration-scenario?forum=lyncdeploy


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Friday, September 13, 2019 2:51 AM
    Moderator
  • Hi Shaw,

    The Skype for Business Server Front-end service stuck in Starting status and certificate property Subject same as the certificate property Issuer https://support.microsoft.com/en-us/help/2795828/lync-server-2013-front-end-service-cannot-start-in-windows-server-2012.

    What should i do?

    Regards,
    Alu Ozy

    Friday, September 13, 2019 10:16 AM
  • Hi Alu,

    The resolution is to remove the incorrectly placed certificates from the Computer Account\Trusted Root Certification Authority\Certificates Store.

    Reboot the server (it must be a reboot, service restarts won’t suffice), and the RtcSrv service will successfully start.

    See here: https://x500.co.uk/2017/09/22/skype-for-business-event-id-30988-32178/

    -Steve

    Friday, September 13, 2019 12:01 PM
  • Hi Steve,

    i already dragging the certificate from Trusted Root Certification Authorities into Intermediate Certification Authorities, then reboot the server but still no luck. After rebooted, Skype for Business Front-end service can't started.

    

    Any solutions?

    Regards,
    Alu Ozy

    Saturday, September 14, 2019 10:42 AM
  • Hi Alu,

    If you run the following command again, are any incorrectly placed certificates returned?

    Get-Childitem cert:\LocalMachine\root -Recurse | Where-Object {$_.Issuer -ne $_.Subject} | Select Issuer, Subject, Thumbprint | fl

    When the RtcSrv service fails to start, what events are logged?  Can you paste the content please.

    -Steve

    Saturday, September 14, 2019 11:18 AM
  • Hi Alu,

    I've been there before. The fact is, when the Front End Service is not running, it means that there is something wrong with your certificates or Central Management Store.

    Personally, When my server was suddenly shut due to power outage, I faced this problem. I've tried a lot of ways including re-requesting and re-assigning the certificates and creating new Central Management Store and republishing the topology, but none of them helped.

    So, If your services was all run before and it now falls into the trouble, and also you have tried your certificates and Central Management Store, export your data including Users, Typologies and all other configuration that you might find them useful, and then re-install your server. at least this will help you save your time.

    Good Luck,

    Iman

    • Edited by Iman Moha Sunday, September 15, 2019 10:11 AM
    Sunday, September 15, 2019 10:10 AM
  • Hi Alu,

    According your description, you have changed the certificate, please re-run the command and check the result. 

    I suggest that please check the Event view on the server side to check the detailed error, and here is a related article you could refer to:

    https://social.technet.microsoft.com/Forums/lync/en-US/d1df7ea9-56d4-496b-a35f-75d0e2096d31/troubleshooting-skype-for-business-server-frontend-service-cannot-start?forum=sfbfr


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Monday, September 16, 2019 6:27 AM
    Moderator
  • Hi Shaw,

    I've checked the "FriendlyName" is empty.

    Regards,
    Alu Ozy

    Tuesday, September 17, 2019 10:02 AM
  • Hi Alu,

    I think you may run “certlm” to open the certificate store for local machine account, and check the certificates in the following store:

    Personal – Certificates (These certificates should have private keys)

    Trusted Root Certification Authorities – Certificates         

    Intermediate Certification Authorities – Certificates   

         

    Check the certificates which friendly name is “none”.


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Wednesday, September 18, 2019 1:36 AM
    Moderator
  • Hi Shaw,

    Here is,

    Regards,
    Alu Ozy

    Wednesday, September 18, 2019 7:06 AM
  • Hi Alu,

    Please remove the “digicert sha2 secure server ca” in “Trusted Root Certification Authorities”.

    It is an intermediate certificate, and should in “Intermediate Certification Authorities”.

    After remove the certificate, please try to restart the service or server.


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Wednesday, September 18, 2019 7:22 AM
    Moderator
  • Hi Shaw,

    Service Front-end still won't running after removing the cert.

    Should i remove cert from Edge Server Skype for Business?

    Regards,
    Alu Ozy

    Thursday, September 19, 2019 12:28 PM
  • Hi Alu,

    It doesn’t need to remove the certificate from Edge server.

    Please check the Lync server Event viewer to see if there is any error on the FE server side, as below:

    Also please re-run the certificate check command to see if there are still items in the result txt file.


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Friday, September 20, 2019 1:29 AM
    Moderator