none
Skype service won't started RRS feed

  • Question

  • Dear All,

    This below topology status on Skype for Business got warning, and some services are stopped & pending.

    You guys have solutions for this?

    Regards,
    Alu Ozy

    Thursday, September 12, 2019 5:43 PM

Answers

  • Hi Alu,

    I think you may run “certlm” to open the certificate store for local machine account, and check the certificates in the following store:

    Personal – Certificates (These certificates should have private keys)

    Trusted Root Certification Authorities – Certificates         

    Intermediate Certification Authorities – Certificates   

         

    Check the certificates which friendly name is “none”.


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    • Marked as answer by Alu Ozy Tuesday, September 24, 2019 12:14 PM
    Wednesday, September 18, 2019 1:36 AM
    Moderator
  • Hi Alu,

    Please remove the “digicert sha2 secure server ca” in “Trusted Root Certification Authorities”.

    It is an intermediate certificate, and should in “Intermediate Certification Authorities”.

    After remove the certificate, please try to restart the service or server.


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Wednesday, September 18, 2019 7:22 AM
    Moderator
  • Hi Alu,

    Did you have a try to reboot the server after removing the certificate?

    Have a try these following commands:

    Reset-CsPoolRegistrarState -PoolFqdn "pool.domain.com" -ResetType QuorumLossRecovery

    or

    Reset-CsPoolRegistrarState -PoolFqdn " pool.domain.com" -ResetType FullReset

    Please refer to this link:

    https://docs.microsoft.com/en-us/powershell/module/skype/reset-cspoolregistrarstate?view=skype-ps


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    • Marked as answer by Alu Ozy Tuesday, September 24, 2019 12:14 PM
    Tuesday, September 24, 2019 9:53 AM
    Moderator
  • Hi Shaw,

    After Reset-CsPoolRegistrarState and rebooting, the front-end service has been running.


    Regards,
    Alu Ozy


    • Edited by Alu Ozy Tuesday, September 24, 2019 12:00 PM Updated status
    • Marked as answer by Alu Ozy Tuesday, September 24, 2019 12:15 PM
    Tuesday, September 24, 2019 10:36 AM

All replies

  • Hi Alu Ozy,

    Did it work before, or anything changed recently?

    I think you may first check if all the Skype for Business services are running, e.g. “Skype for Business Server Front-End” service.

    Then check the Lync server event viewer on both the servers, check if there is any related error. If exists, please provide the Event ID and error information.

    Sometimes, it may be related to incorrect certificate store location, run the following script to the server side and check if there is any item in the result txt file.

    Get-Childitem cert:\LocalMachine\root -Recurse | Where-Object {$_.Issuer -ne $_.Subject} | Format-List * | Out-File "c:\computer_filtered.txt"

    If any item exists, check the certificate is installed in the current store location, make sure “Trusted Root Certification Authorities” store only contains self-signed certificates.

    Here is a similar case you could refer to:

    https://social.technet.microsoft.com/Forums/lync/en-US/908c64f3-23cd-40f0-ae5d-e7eb20083773/registrar-and-userserver-is-not-starting-and-working-in-a-migration-scenario?forum=lyncdeploy


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Friday, September 13, 2019 2:51 AM
    Moderator
  • Hi Shaw,

    The Skype for Business Server Front-end service stuck in Starting status and certificate property Subject same as the certificate property Issuer https://support.microsoft.com/en-us/help/2795828/lync-server-2013-front-end-service-cannot-start-in-windows-server-2012.

    What should i do?

    Regards,
    Alu Ozy

    Friday, September 13, 2019 10:16 AM
  • Hi Alu,

    The resolution is to remove the incorrectly placed certificates from the Computer Account\Trusted Root Certification Authority\Certificates Store.

    Reboot the server (it must be a reboot, service restarts won’t suffice), and the RtcSrv service will successfully start.

    See here: https://x500.co.uk/2017/09/22/skype-for-business-event-id-30988-32178/

    -Steve

    Friday, September 13, 2019 12:01 PM
  • Hi Steve,

    i already dragging the certificate from Trusted Root Certification Authorities into Intermediate Certification Authorities, then reboot the server but still no luck. After rebooted, Skype for Business Front-end service can't started.

    

    Any solutions?

    Regards,
    Alu Ozy

    Saturday, September 14, 2019 10:42 AM
  • Hi Alu,

    If you run the following command again, are any incorrectly placed certificates returned?

    Get-Childitem cert:\LocalMachine\root -Recurse | Where-Object {$_.Issuer -ne $_.Subject} | Select Issuer, Subject, Thumbprint | fl

    When the RtcSrv service fails to start, what events are logged?  Can you paste the content please.

    -Steve

    Saturday, September 14, 2019 11:18 AM
  • Hi Alu,

    I've been there before. The fact is, when the Front End Service is not running, it means that there is something wrong with your certificates or Central Management Store.

    Personally, When my server was suddenly shut due to power outage, I faced this problem. I've tried a lot of ways including re-requesting and re-assigning the certificates and creating new Central Management Store and republishing the topology, but none of them helped.

    So, If your services was all run before and it now falls into the trouble, and also you have tried your certificates and Central Management Store, export your data including Users, Typologies and all other configuration that you might find them useful, and then re-install your server. at least this will help you save your time.

    Good Luck,

    Iman

    • Edited by Iman Moha Sunday, September 15, 2019 10:11 AM
    Sunday, September 15, 2019 10:10 AM
  • Hi Alu,

    According your description, you have changed the certificate, please re-run the command and check the result. 

    I suggest that please check the Event view on the server side to check the detailed error, and here is a related article you could refer to:

    https://social.technet.microsoft.com/Forums/lync/en-US/d1df7ea9-56d4-496b-a35f-75d0e2096d31/troubleshooting-skype-for-business-server-frontend-service-cannot-start?forum=sfbfr


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Monday, September 16, 2019 6:27 AM
    Moderator
  • Hi Shaw,

    I've checked the "FriendlyName" is empty.

    Regards,
    Alu Ozy

    Tuesday, September 17, 2019 10:02 AM
  • Hi Alu,

    I think you may run “certlm” to open the certificate store for local machine account, and check the certificates in the following store:

    Personal – Certificates (These certificates should have private keys)

    Trusted Root Certification Authorities – Certificates         

    Intermediate Certification Authorities – Certificates   

         

    Check the certificates which friendly name is “none”.


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    • Marked as answer by Alu Ozy Tuesday, September 24, 2019 12:14 PM
    Wednesday, September 18, 2019 1:36 AM
    Moderator
  • Hi Shaw,

    Here is,

    Regards,
    Alu Ozy

    Wednesday, September 18, 2019 7:06 AM
  • Hi Alu,

    Please remove the “digicert sha2 secure server ca” in “Trusted Root Certification Authorities”.

    It is an intermediate certificate, and should in “Intermediate Certification Authorities”.

    After remove the certificate, please try to restart the service or server.


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Wednesday, September 18, 2019 7:22 AM
    Moderator
  • Hi Shaw,

    Service Front-end still won't running after removing the cert.

    Should i remove cert from Edge Server Skype for Business?

    Regards,
    Alu Ozy

    Thursday, September 19, 2019 12:28 PM
  • Hi Alu,

    It doesn’t need to remove the certificate from Edge server.

    Please check the Lync server Event viewer to see if there is any error on the FE server side, as below:

    Also please re-run the certificate check command to see if there are still items in the result txt file.


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Friday, September 20, 2019 1:29 AM
    Moderator
  • Hi,

    Is there any update on this case?

    Please feel free to drop us a note if there is any update.

    Have a nice day!


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Monday, September 23, 2019 9:32 AM
    Moderator
  • Hi Shaw,

    Details from Event Viewer:

    Warning:

    - Skype for Business Server MCUFactory exception was handled.
    - Server startup is being delayed because fabric pool manager has not finished initial placement of users.

    Error:

    - There was no response from the Front End to an OPTIONS request sent by the Mediation Server service. The Front End, Skype Pool, is not responding to an OPTIONS request sent by the Mediation Server service.

    - The Front End cannot be contacted. Mediation server will keep trying; however additional failures will not be logged. The Front End, Skype Pool, is not responding to OPTIONS requests sent by the Mediation Server service.

    - The Mediation Server service has encountered a major connectivity problem with the Front End. Front End FQDN: Skype Pool.

    - Skype for Business Server 2015, Response Group Service Match Making could not find the Contact objects used for subscribing to agents' presence. A total of 3 presence watcher Contact objects should exist in this pool, but only 0 were found within 180 seconds after the start of the process. Cause: The application has not been properly activated or the Contact object was deleted.
    Resolution: Re-publish the topology and restart just Response Group Service.

    After removing the certificate, the certificate can't retrieve with this command:
    Get-Childitem cert:\LocalMachine\root -Recurse | Where-Object {$_.Issuer -ne $_.Subject} | Select Issuer, Subject, Thumbprint | fl

    Regrads,
    Alu Ozy

    • Edited by Alu Ozy Monday, September 23, 2019 12:27 PM adding error messages
    Monday, September 23, 2019 12:25 PM
  • Hi Alu,

    Did you have a try to reboot the server after removing the certificate?

    Have a try these following commands:

    Reset-CsPoolRegistrarState -PoolFqdn "pool.domain.com" -ResetType QuorumLossRecovery

    or

    Reset-CsPoolRegistrarState -PoolFqdn " pool.domain.com" -ResetType FullReset

    Please refer to this link:

    https://docs.microsoft.com/en-us/powershell/module/skype/reset-cspoolregistrarstate?view=skype-ps


    Best Regards,
    Shaw Lu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    • Marked as answer by Alu Ozy Tuesday, September 24, 2019 12:14 PM
    Tuesday, September 24, 2019 9:53 AM
    Moderator
  • Hi Shaw,

    After Reset-CsPoolRegistrarState and rebooting, the front-end service has been running.


    Regards,
    Alu Ozy


    • Edited by Alu Ozy Tuesday, September 24, 2019 12:00 PM Updated status
    • Marked as answer by Alu Ozy Tuesday, September 24, 2019 12:15 PM
    Tuesday, September 24, 2019 10:36 AM