Good Morning,
Our SCOM Administrator recently installed the Management packs for Lync Server 2013. When he did this we received multiple warning messages and a couple of critical messages in SCOM.
I have been working through them, but having issue finding good information. More or less just trying to understand the alerts and if they are relavant to functionality or can be overridden in SCOM
LS Acccess Edge Component
1. Connection attempt to at least one service in a pool failed.
Connection attempts to the following services have failed. Another attempt will be made for each service every 10 minutes.
Service Address: 23.253.178.224:5061; Pool FQDN: sip.rackspace.com; Down Time: 7:44
Service Address: 23.253.178.227:5061; Pool FQDN: sip.rackspace.com; Down Time: 7:15
Cause: The specified service(s) are unavailable.
Resolution:
Check the servers in the pool(s) on which the service(s) are installed.
2. TLS outgoing connection failures.
Over the past 3 minutes, Lync Server has experienced TLS outgoing connection failures 31 time(s). The error code of the last failure is 0x80092010(CRYPT_E_REVOKED) while trying to connect to the server "sip.domain.com" at address [148.159.162.184:5061],
and the display name in the peer certificate is "Unavailable".
Cause: Most often a problem with the peer certificate or perhaps the host name (DNS) record used to reach the peer server. Target principal name is incorrect means that the peer certificate does not contain the name that the local server used to connect. Certificate
root not trusted error means that the peer certificate was issued by a remote CA that is not trusted by the local machine.
Resolution:
Check that the address and port matches the FQDN used to connect, and that the peer certificate contains this FQDN somewhere in its subject or SAN fields. If the FQDN refers to a DNS load balanced pool then check that all addresses returned by DNS refer to
a server in the same pool. For untrusted root errors, ensure that the remote CA certificate chain is installed locally. If you have already installed the remote CA certificate chain, then try rebooting the local machine.
3. The following discovered partners are sending frequent invalid SIP requests to the Access Edge Server.
Traffic from these partners is restricted to 1 message per second as a security measure.
Certificate Subject: "US, Michigan, Grand Rapids, "BDO USA, LLP", sip.bdo.com"; Issuer: "BE, GlobalSign nv-sa, GlobalSign Organization Validation CA - G2"; Serial Number: 1121939BFCDED892C02B4E0F3E281A570806; Common Failures: OTHER(430)=1
OTHER(4xx)=1
Cause: Federated partners that were discovered through DNS SRV are sending frequent SIP requests that cause an error response from the local Lync Server deployment.
Resolution:
It is recommended that connections from these partners be blocked at the firewall.
***NOTE - Think our Senior Lync engineer is working on this one...we have an open Federation
LS Mediation Server Component
1. There was no response from a Trunk to an OPTIONS request sent by the Mediation Server.
The Trunk, 10.16.210.1;trunk=10.16.210.1, is not responding to an OPTIONS request sent by the Mediation Server service.
DNS Resolution Failure: False
Exception: Microsoft.Rtc.Signaling.ConnectionFailureException:Unable to establish a connection. ---> System.Net.Sockets.SocketException (0x80004005): A connection attempt failed because the connected party did not properly respond after a period of time,
or established connection failed because connected host has failed to respond
--- End of inner exception stack trace ---
at Microsoft.Rtc.Signaling.SipAsyncResult2`1.ThrowIfFailed()
at Microsoft.Rtc.Signaling.SipAsyncResultBase2.EndAsyncOperation[TResult](Object owner, IAsyncResult result)
at Microsoft.RTC.MediationServerCore.PeriodicOptionsSender.FinishSendOptionMessage(IAsyncResult ar)
Detected at System.Environment.GetStackTrace(Exception e, Boolean needFileInfo)
at System.Environment.get_StackTrace()
at Microsoft.Rtc.Signaling.RealTimeException..ctor(String message, Exception innerException)
at Microsoft.Rtc.Signaling.ExceptionUtilities.TryMapS4Exception(Exception s4Exception, SecurityAssociationContext securityContext, Boolean isSipEndpoint, String traceId, Object parentObject, Object childObject, RealTimeException& ex)
at Microsoft.Rtc.Signaling.SipTransactionAsyncResult`1.ConnectionConnectCompleted(IAsyncResult result)
at Microsoft.Rtc.Signaling.SipAsyncResult2`1.MakeCallback()
at Microsoft.Rtc.Signaling.SipAsyncResult2`1.Complete(TEx ex, Boolean synchronousCompletion)
at Microsoft.Rtc.Signaling.RealTimeConnection.CompletePendingConnects(IEnumerable`1 results, RealTimeException exception)
at Microsoft.Rtc.Signaling.RealTimeConnection.<.ctor>b__1(SipConnection sender, Object reason)
at Microsoft.Rtc.Internal.Sip.SipConnection.FireDisconnectedEvent(Object reason)
at Microsoft.Rtc.Internal.Sip.SingleThreadedDispatcherQueue.DispatcherCallback(Object queue)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()
Cause: The Mediation Server service cannot communicate with the Trunk Service over SIP due to network connectivity issues.
Resolution:
Please ensure network connectivity and availability of the Trunk for the Mediation Server service to be able to function correctly.
2. The Mediation Server service has received a call that does not support comfort noise. This event is throttled after 5 calls from a single Trunk peer.
The Mediation Server service has received a call that does not support comfort noise from the Trunk, 10.16.210.1;trunk=10.16.210.1
Cause: The Trunk does not support comfort noise.
Resolution:
Please ensure the comfort noise option on the Trunk has been enabled.
I appreciate and feedback and apologize in advance since this is alot of information.
Thank You