After buying a CA sign certificate from Geotrust i got this in my Event viewer:

Remote principal name is not configured in trusted server list.

The subject name sip.XXX.com of the certificate assigned to process AVMCUSvc(1788) was not found in the trusted server list.
Certificate serial number: OU=Equifax Secure Certificate Authority, O=Equifax, C=US
Certificate issuer name: 0DA2A3.
Cause: Incorrect setup of the pool. Should never happen.
Resolution:
Verify that the Subject Name of the certificate presented by the remote peer is configured in the trusted server list.

For more information, see Help and Support Center at

I fix this problem by typing:

c:
cd \
cd “C:\Program Files\Microsoft Office Communications Server 2007 R2\ResKit”
cscript OCSTrustEntry.vbs /action:add /FQDN:sip.XXXX.com /type:TrustedServer

Sponsor link: http://www.it-århus.dk / http://www.it-aarhus.dk

By admin

2 thoughts on “Remote principal name is not configured in trusted server list.”
  1. Hi.
    Thanks for post.

    OCS2007R Standard Edition Front End with certificate: Subject “ocs-fe.company.local” and SAN “ocs.company.com”.
    I try to install a certificate on the server OCS-FE with only Subject “ocs.company.com” – all services are running except for A/V conf.
    The server reported an error:
    Source: OCS Audio-Video Conferencing Server Computer: ocs-fe.company.local
    Description: An invalid certificate was selected for TLS connections.
    Issuer: CN=INTRANET-CA-ROOT, DC=company, DC=local
    Serial Number: ***
    Cause: The selected certificate could not be found or the subject name of the certificate does not match the FQDN of the server or pool.

    you have decided the same problem? , I added the server name in the trusted names in your article. what else could be wrong?

    (text was translated by google)

Leave a Reply

Your email address will not be published. Required fields are marked *