Shulou(Shulou.com)06/02 Report--

Problem description:

Environment: server-side Skype for Business 2015 Enterprise Edition, client Lync 2010 and Lync 2013

Client login using Lync2010 is normal, but it cannot be logged in when using the Lync2013 client to log in to the same account. The error message is:

"the server display is not available. If the problem persists, please contact your support team"

Check the system log on the Skype for Business front-end server and there will be two Schannel errors with Event ID of 36874 and 36888

Analysis:

From the error report, we can see that this problem is related to TLS1.2.

When the client wants to communicate securely with the server, the server and the client must confirm the same password suite, including:

How to authenticate each other (key exchange)

How to encrypt data (encrypted password)

How to verify that a message has not been tampered with (message authentication code)

How to determine random numbers (pseudorandom functions)

Obviously, at present, the server cannot find the same password suite provided by the client, resulting in an error.

Solution:

Disable TLS 1.2to force client and server to communicate through TLS 1.1s.

Disable TLS 1.2 in the following ways:

1. Open registry editing on the SFB front-end server and find the following location: HKLM\ System\ CurrentControlSet\ Control\ SecurityProviders\ SChannel\ Protocols

two。 Create a key value TLS 1.2 under the protocol

3. Create key values Client and Server (two keys) under TLS 1.2,

4. Create DWORDs values DisabledByDefault and Enabled under the Client and Server keys

5. Change the DisabledByDefault and Enabled values to DisabledByDefault=1 under the Client and Server keys, Enabled = 0

6. Restart the server

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.