We have a Lync 2010 deployment. We have Windows PCs joined to the domain, we even have Macs that are not on the domain but we installed the certificates and gave them the right permission levels and all is good.
Now we just hired a consultant and we are allowing them on the network but do not want them joined to domain. Windows 7. I have manually installed the root cert for the domain CA and also exported the lync cert from the lync server and had him install that. We use manual setup and specify the FQDN of the Lync server, not just shortname. It keeps popping the dialog about a problem verifying the certificate.
I had him turn on logging, and this is what we got. Your help is greatly appreciated!
07/23/2013|15:51:16.962 2434:1D14 INFO :: ********************************************************************************
********************************************************************************
####### module=uccapi flavor=fre version=4.0.7577.0 ######
************************************************************************************************************************
****************************************
07/23/2013|15:51:16.993 2434:1D14 INFO :: CUccPlatform::EnableTracing: tracing enabled
07/23/2013|15:51:17.024 2434:1D14 INFO :: CUccPlatform::EnableTracing : media stack tracing enabled
07/23/2013|15:51:17.040 2434:1D14 WARN :: CUccPlatform::EnableTracing: tracing is already enabled
07/23/2013|15:51:17.055 2434:1D14 INFO :: CUccPlatform::EnableTracing : media stack tracing enabled
07/23/2013|15:51:20.487 2434:1D14 INFO :: CUccServerEndpoint::Initialize - This endpoint is sharing presentity data.
07/23/2013|15:51:20.487 2434:1D14 INFO :: CUccEndpoint::put_TelephonyTypewrite - Set TTY enabled to false
07/23/2013|15:51:20.487 2434:1D14 INFO :: UCCP:ClientAllowedAuthProts0xc
07/23/2013|15:51:20.487 2434:1D14 INFO :: CUccServerSignalingSettings::put_AllowedHttpProxyAuthenticationModes set auth modes 0x1f
07/23/2013|15:51:20.487 2434:1D14 INFO :: CUccDnsResolverManager::Start MR-INFO - [05490C28] DNS resolver manager started
07/23/2013|15:51:20.487 2434:1D14 INFO :: UCCP:NegotiatedAuthProt0x0
07/23/2013|15:51:20.487 2434:1D14 INFO :: UCCP:ServerAuthProts0x0
07/23/2013|15:51:20.487 2434:1D14 INFO :: Function: CUccPrincipalServerEndpoint::UnpackExclusionList
07/23/2013|15:51:20.487 2434:1D14 ERROR :: HRESULT failed: 80004005 = hr . Wrong format
07/23/2013|15:51:20.487 2434:1D14 INFO :: CUccPrincipalServerEndpoint::GetSipProviderProfile - Found no http proxy creds
07/23/2013|15:51:20.487 2434:1D14 INFO :: UCCP:ServerAuthProts0x0
07/23/2013|15:51:20.487 2434:1D14 INFO :: SIP_REGISTER:State (0) => (1)
07/23/2013|15:51:20.487 2434:1D14 INFO :: Outgoing 0548DDC8-<sip:SipWasInHereAndCorrect>, local=(null)
07/23/2013|15:51:20.487 2434:1D14 INFO :: Out trxn corr-id (033D5A48)
07/23/2013|15:51:20.487 2434:1D14 INFO :: SIP_MSG_PROCESSOR::GetLocalConnectionAddrSubnet get loca IP address returned NULL
07/23/2013|15:51:20.487 2434:1D14 INFO :: SIP_MSG_PROCESSOR::GetSubnetHeader Invalid subnet -1
07/23/2013|15:51:20.487 2434:1D14 INFO :: REGISTER_CONTEXT(548ddc8) SetAndNotify Recv(4) at State (0)
07/23/2013|15:51:20.487 2434:1D14 INFO :: REGISTER_CONTEXT:State (0) => (4)
07/23/2013|15:51:20.487 2434:1D14 TRACE :: SIP_MSG_PROCESSOR::OnDnsResolutionComplete[0548DDC8] Entered host FQDNofLyncServer
07/23/2013|15:51:20.487 2434:1D14 INFO :: SockMgr: Create New Connection:DestName:(FQDN of lync server was in here)DestPort:(5061)Transport:(2)httpTunnel:(0)TLS RemotePrincipalName:(FQDN of lync server was in here)
07/23/2013|15:51:20.487 2434:1D14 TRACE :: DestAddr :172.24.1.40:5061
07/23/2013|15:51:20.487 2434:1D14 TRACE :: ProxyAddr:0.0.0.0:0
07/23/2013|15:51:20.487 2434:1D14 TRACE :: CSIPTransportLayer::CSIPTransportLayer - [0x033E8258]
07/23/2013|15:51:20.487 2434:1D14 TRACE :: CSIPTransportLayerNotify::CSIPTransportLayerNotify - [0x033E8260]
07/23/2013|15:51:20.487 2434:1D14 TRACE :: SSIPTransportContext::SSIPTransportContext - [0x033E8290]
07/23/2013|15:51:20.487 2434:1D14 TRACE :: SSIPTransportContext::SSIPTransportContext - [0x000EF468]
07/23/2013|15:51:20.487 2434:1D14 TRACE :: CSIPTransportLayer::CSIPTransportLayer - [0x03457040]
07/23/2013|15:51:20.487 2434:1D14 TRACE :: CSIPTransportLayerNotify::CSIPTransportLayerNotify - [0x03457048]
07/23/2013|15:51:20.487 2434:1D14 TRACE :: CSIPAsyncSocket::CSIPAsyncSocket - [0x03457040]
07/23/2013|15:51:20.487 2434:1D14 TRACE :: CSIPAsyncSocket::Initialize - [0x03457040]
07/23/2013|15:51:20.487 2434:1D14 TRACE :: CSIPAsyncSocket::CreateSocketWindow - [0x03457040]
07/23/2013|15:51:20.503 2434:1D14 TRACE :: CSIPTransportLayer::CSIPTransportLayer - [0x00252638]
07/23/2013|15:51:20.503 2434:1D14 TRACE :: CSIPTransportLayerNotify::CSIPTransportLayerNotify - [0x00252640]
07/23/2013|15:51:20.503 2434:1D14 TRACE :: CSIPTransportLayerSecurity::CSIPTransportLayerSecurity - [0x00252638]
07/23/2013|15:51:20.503 2434:1D14 TRACE :: CSIPTransportLayer::CSIPTransportLayer - [0x03456EA0]
07/23/2013|15:51:20.503 2434:1D14 TRACE :: CSIPTransportLayerNotify::CSIPTransportLayerNotify - [0x03456EA8]
07/23/2013|15:51:20.503 2434:1D14 TRACE :: CSIPCompression::CSIPCompression - [0x03456EA0]
07/23/2013|15:51:20.503 2434:1D14 INFO :: CSIPCompressor::Initialize - Compression setting 1, threshold 128000, timeout 5000
07/23/2013|15:51:20.503 2434:1D14 TRACE :: CSIPTransportLayerNotify::CSIPTransportLayerNotify - [0x0548C358]
07/23/2013|15:51:20.503 2434:1D14 TRACE :: CSIPMessageCollator::CSIPMessageCollator - [0x0548C358]
07/23/2013|15:51:20.503 2434:1D14 TRACE :: CSIPMessageCollator::CreateCollatorWindow - [0x0548C358]
07/23/2013|15:51:20.503 2434:1D14 INFO :: CSIPAsyncSocket::Connect 03457040 connecting(async) window 00130D44 socket:00000BF4 DestAddr:172.24.1.40:5061
07/23/2013|15:51:20.503 2434:1D14 TRACE :: SSIPTransportContext::~SSIPTransportContext - [0x000EF468]
07/23/2013|15:51:20.503 2434:1D14 TRACE :: CSIPAsyncSocket::SetLocalAddr - [0x03457040]
07/23/2013|15:51:20.503 2434:1D14 TRACE :: Async work item posted for TLS negotiation: this 00252638
07/23/2013|15:51:20.503 2434:1D14 TRACE :: CSIPAsyncSocket::Send this 03457040, sending pbSendBuf 0341DDA8, dwSendBufSize = 137
07/23/2013|15:51:20.503 2434:1D14 TRACE :: CSIPAsyncSocket::SendHelper - [0x03457040]
07/23/2013|15:51:20.503 2434:1D14 TRACE :: CSIPAsyncSocket::SendHelper this 03457040, pbSendBuf 0341DDA8, dwSendBufSize = 137, dwBytesSent = 137
07/23/2013|15:51:20.519 2434:1D14 TRACE :: CSIPTransportLayerNotify::OnRecv - [0x03457048]
07/23/2013|15:51:20.519 2434:1D14 TRACE :: Async work item posted for TLS negotiation: this 00252638
07/23/2013|15:51:20.550 2434:504 ERROR :: SECURE_SOCKET: negotiation failed: 80090325, principal name: [pit810-lcs01vw.cbb.local]
07/23/2013|15:51:20.550 2434:1D14 ERROR :: CSIPTransportLayerSecurity::OnTlsNegotiationComplete (252638) failed with 0x80ee00ca. Raising OnConnect with the same error
07/23/2013|15:51:20.550 2434:1D14 ERROR :: CSIPClientConnection::OnConnect (80ee00ca) this: 033E8258
07/23/2013|15:51:20.550 2434:1D14 INFO :: SIP_MSG_PROCESSOR::OnRequestConnectionConnectComplete - Enter this: 0548DDC8, callid=(null), ErrorCode: 0x80ee00ca
07/23/2013|15:51:20.550 2434:1D14 ERROR :: Releasing connection and notifying transactions
07/23/2013|15:51:20.550 2434:1D14 ERROR :: SIP_MSG_PROCESSOR::NotifyRequestConnectionConnectComplete - Error: 80ee00ca
07/23/2013|15:51:20.550 2434:1D14 TRACE :: CSIPTransportLayerSecurity::Shutdown - [0x00252638]
07/23/2013|15:51:20.550 2434:1D14 TRACE :: CSIPMessageCollator::~CSIPMessageCollator - [0x0548C358]
07/23/2013|15:51:20.550 2434:1D14 TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x0548C358]
07/23/2013|15:51:20.550 2434:1D14 TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x03456EA8]
07/23/2013|15:51:20.550 2434:1D14 TRACE :: CSIPTransportLayer::~CSIPTransportLayer - [0x03456EA0]
07/23/2013|15:51:20.550 2434:1D14 TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x00252640]
07/23/2013|15:51:20.550 2434:1D14 TRACE :: CSIPTransportLayer::~CSIPTransportLayer - [0x00252638]
07/23/2013|15:51:20.550 2434:1D14 TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x03457048]
07/23/2013|15:51:20.550 2434:1D14 TRACE :: CSIPTransportLayer::~CSIPTransportLayer - [0x03457040]
07/23/2013|15:51:20.550 2434:1D14 TRACE :: SSIPTransportContext::~SSIPTransportContext - [0x033E8290]
07/23/2013|15:51:20.550 2434:1D14 TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x033E8260]
07/23/2013|15:51:20.550 2434:1D14 TRACE :: CSIPTransportLayer::~CSIPTransportLayer - [0x033E8258]
07/23/2013|15:51:20.550 2434:1D14 ERROR :: OUTGOING_TRANSACTION::OnRequestConnectionConnectComplete - connection failed error 80ee00ca
07/23/2013|15:51:20.550 2434:1D14 INFO :: REGISTER_CONTEXT:State (4) => (5)
07/23/2013|15:51:20.550 2434:1D14 INFO :: REGISTER_CONTEXT(548ddc8) SetAndNotify Recv(6) at State (5)
07/23/2013|15:51:20.550 2434:1D14 INFO :: REGISTER_CONTEXT:State (5) => (6)
07/23/2013|15:51:20.550 2434:1D14 INFO :: SIP_REGISTER:State (1) => (0)
07/23/2013|15:51:20.550 2434:1D14 TRACE :: CUccServerEndpoint::UpdateEndpointState - Update state from 1 to 0. Status 80EE00CA. Status text (null).
07/23/2013|15:51:20.550 2434:1D14 INFO :: Function: CUccServiceOperationManager::DisableServManager
07/23/2013|15:51:20.550 2434:1D14 TRACE :: Condition failed with 80ee0061: 'm_fServMgrEnabled'
07/23/2013|15:51:20.550 2434:1D14 INFO :: Function: CUccServerEndpoint::UpdateEndpointState
07/23/2013|15:51:20.550 2434:1D14 ERROR :: HRESULT API failed: 80ee0061 = hr. DisableServManager
07/23/2013|15:51:20.550 2434:1D14 INFO :: CUccDnsResolverManager::Stop MR-INFO - [05490C28] DNS resolver manager stopped
07/23/2013|15:51:20.550 2434:1D14 INFO :: ~Out trxn corr-id (033D5A48)
07/23/2013|15:51:20.550 2434:1D14 INFO :: Function: CUccEndpoint::Disable
07/23/2013|15:51:20.550 2434:1D14 TRACE :: Condition failed with 80ee0092: 'GetState() != UCCES_IDLE'
07/23/2013|15:51:20.550 2434:1D14 INFO :: SIP_REGISTER::Unregistration already in unregister/ed state (0), this [033E1FE8]
07/23/2013|15:51:20.550 2434:1D14 INFO :: SIP_STACK::DeleteSipEndpoint deleting sip endpoint 0345CE28, this 033E1FE8
07/23/2013|15:51:20.550 2434:1D14 INFO :: SIP_ENDPOINT::Shutdown (345ce28) Shutdown
07/23/2013|15:51:20.550 2434:1D14 INFO :: CUccDnsResolverManager::Stop MR-INFO - [05490C28] DNS resolver manager stopped