Tag Archives: Office Communications Server

A significant number of invalid certificates have been provided by remote IP address 205.188.153.55 / 64.12.162.248

AOL has change there Root Certificate.
You can download them at https://pki-info.aol.com/AOL/

These 2 need to be imported in all Office Communication Server T – rusted Root Certification Authorities

You can see a video on howto import these 2 certificates here: http://simsbury.members.winisp.net/Update-AOL-Root-CA.wmv

There errors is belov

Multiple invalid incoming certificates.

In the past 1185 minutes the server received 12 invalid incoming certificates. The last one was from host 64.12.162.248.
Cause: This can happen if a remote server presents an invalid certificate due to an incorrect configuration or an attacker.
Resolution:
No action needed unless the number of failures is large. Contact the administrator of the host sending the invalid certificate and resolve this problem.

Over the past 0 minutes Office Communications Server has experienced TLS outgoing connection failures 1 time(s). The error code of the last failure is 0x80090325 (The certificate chain was issued by an authority that is not trusted.) while trying to connect to the host “sip.oscar.aol.com”.

Cause: Wrong principal error could happen if the peer presents a certificate whose subject name does not match the peer name. Certificate root not trusted error could happen if the peer certificate was issued by remote CA that is not trusted by the local machine.

In the past 0 minutes the server received 1 invalid incoming certificates. The last one was from host 64.12.162.248.

Cause: This can happen if a remote server presents an invalid certificate due to an incorrect configuration or an attacker.

Remote principal name is not configured in trusted server list.

After buying a CA sign certificate from Geotrust i got this in my Event viewer:

Remote principal name is not configured in trusted server list.

The subject name sip.XXX.com of the certificate assigned to process AVMCUSvc(1788) was not found in the trusted server list.
Certificate serial number: OU=Equifax Secure Certificate Authority, O=Equifax, C=US
Certificate issuer name: 0DA2A3.
Cause: Incorrect setup of the pool. Should never happen.
Resolution:
Verify that the Subject Name of the certificate presented by the remote peer is configured in the trusted server list.

For more information, see Help and Support Center at

I fix this problem by typing:

c:
cd \
cd “C:\Program Files\Microsoft Office Communications Server 2007 R2\ResKit”
cscript OCSTrustEntry.vbs /action:add /FQDN:sip.XXXX.com /type:TrustedServer

Sponsor link: http://www.it-århus.dk / http://www.it-aarhus.dk

Office Communications Server 2007 R2: Installation failed with: Failure [0xC3EC78D8] Failed to read the Office Communications Server version information. This can happen if the computer clock is not set to correct date and time.

Its was solved by uninstall KB974571.

Microsoft recommends to postpone installing KB974571 on any LCS 2005 / OCS 2007 /OCS 2007 R2 servers.

Microsoft is investigating this issue, and will determine the most appropriate way to address it. Customers who are not running OCS or LCS server are not affected by this known issue, and can safely ignore this issue.

Customers who have deployed the OCS or LCS product on a server should assess the risk that is involved to decide whether to install the security update on that server. These customers should revisit this Knowledge Base article often, because this article will be updated as soon as more information and a resolution are available.

Office Communications Server 2007 R2: Installation failed with: Failure [0x80070005] Access is denied.

If you installation failed with: Failure [0x80070005] Access is denied.

This is a problems with administrator rights.

Please check the following things:

  1. The user need to be a domain user.
  2. The user is member of: Domain Admins group and RTCUniversalServerAdmins group. (Remember to relogon after you have put the user in these group).

Then right click on the installation file:

\Setup\amd64\setupee.exe (For enterprise)
\Setup\amd64\setupse.exe (For standard)

And then click Run As, then run it without “Run this program with restricted access”

Now you should be able to installed the Office Communications Server 2007 R2