Daniyar's Tech blog

Thursday, February 4, 2016

Sonus SBA issue Oauth certificate is missing

Log Name:      Lync Server
Source:        LS Replica Replicator Agent Service
Date:          2/4/2016 5:29:26 AM
Event ID:      3041
Task Category: (3003)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      sba.domain.com
Description:
The replication of certificates from the central management store to the local machine failed due to a problem with encryption key management. Microsoft Lync Server 2013, Replica Replicator Agent will continuously attempt to retry the replication. While this condition persists, the certificates on the local machine will not be updated.
Exception: Microsoft.Incubation.Crypto.GroupKeys.KeyException: Not able to read from the key object. ---> System.Runtime.InteropServices.COMException: The specified directory service attribute or value does not exist.
   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
   at System.DirectoryServices.DirectorySearcher.FindOne()
   at Microsoft.Incubation.Crypto.GroupKeys.ADRepository.ReadKey(Guid keyId)
   --- End of inner exception stack trace ---
   at Microsoft.Incubation.Crypto.GroupKeys.ADRepository.ReadKey(Guid keyId)
   at Microsoft.Incubation.Crypto.GroupKeys.DKMBase.ReadKey(Guid guid)
   at Microsoft.Incubation.Crypto.GroupKeys.DKMBase.Unprotect(MemoryStream cipherText, Boolean pinnedOutput)
   at Microsoft.Rtc.Management.Internal.KeyManagement.GroupKeyWrapper.DecodeToArray(String cipherText)
   at Microsoft.Rtc.Management.Deployment.Core.Certificate.ReplicateCMSCertificates(IScopeAnchor scope)
   at Microsoft.Rtc.Internal.Tools.Bootstrapper.Bootstrapper.ReplicateCMSCertificates().
Cause: The encryption key database has been corrupted or local machine cannot access it.
Resolution:
Ensure that forest configuration is up to date. Run Enable-CSAdForest and/or Enable-CSComputer Power Shell commands to validate forest and local machine configuration.

The solution in my case was to set rights to SBA compouter account - RTCComponentUniversalServices, RTCHSUniversalServices, RTCSBAUniversalServices.

It is needed to access AD contaner fof Lync certificates -   domain.local/Program Data/Microsoft/Distributed KeyMan/LyncCertificates. - Open with ADSI edit and check it's security.

Once it is done, wait until AD replicates everywhere. Then in SBA run enable-cscomputer and reboot.

Wednesday, February 3, 2016

Sonus SBA Lync 2013 FrontEnd service does not start

Some issue while deploying SBA on Sonus

Log Name: Lync Server

Source: LS AppDomain Host Process

Date: 2/3/2016 7:36:24 PM

Event ID: 50006

Task Category: (1029)

Level: Error

Keywords: Classic

User: N/A

Computer: SBA.domain.com

Description:

An exception caused the process to stop.

Exception Details. System.ApplicationException: Failed to start Fabric Pool Manager.

at Microsoft.Rtc.AppDomainHost.Launcher.Initialize(String[] args)

at Microsoft.Rtc.AppDomainHost.Launcher.Main(String[] args)

Cause: Check the eventlog description.

Resolution:

Examine prior event log entries to find and resolve the problem. If the problem persists contact product support.

to solve the issue, log to SBA in RDP, uninstall windowsfabric using Control Panel, do not reboot and install windowsfabric.msi - take it from Lync 2013 server source DVD.

Tuesday, February 2, 2016

Test 911

http://karl.kornel.us/2014/10/the-911-test/

Monday, February 1, 2016

Once more about Lync (Skype for Business) RGS forwarding to PSTN

You need to assign Dialplan and voicepolicy to RGS workflow to let forward to PSTN.

Grant-CSDialPlan –Identity sip:workflow@domain.com -PolicyName "USA_DIAL_PLAN"

Grant-CSVoicePolicy –Identity sip:workflow@domain.com -PolicyName "US-International"

Thursday, January 28, 2016

Everything you needs to know on Powershell Lync RGS

http://www.skypeadmin.com/2014/08/01/draft-lync-interactive-response-group-creation-and-modification-via-powershell/

As you know RGS IVR GUI is limited only to 4 Options and 2 levels , if you want to overcome you need to use powershell. Well you can pre-create a skeleton in GUI and then add Option in PS. Something like this:

$workflow = Get-CsRgsWorkflow -Identity service:ApplicationServer:fepool.contoso.com/ea0c81cc-50df-4b8d-a488-8737f2200ed1

$MainMenu = Get-CsRgsQueue -Identity service:ApplicationServer:fepool.contoso.com -Name "Main Number Menu - forward"
$ActionA8 = New-CsRgsCallAction -Action TransferToQueue -QueueID $MainMenu.Identity
$Answer8 = New-CsRgsAnswer -Action $ActionA8 -DtmfResponse 8

$workflow.DefaultAction.Question.AnswerList.Add($Answer8)

Set-CsRgsWorkflow $workflow