Lync Edge Access service can't start

Question

A serious problem related to certificates is preventing Lync Server from functioning.

Unable to use the certificate configured for the external edge of the Access Edge Server.
Error 0x800B0109(CERT_E_UNTRUSTEDROOT).
The certificate may have been deleted or may be invalid, or permissions are not set correctly.
Ensure that a valid certificate is present in the local computer certificate store. Also ensure that the server has sufficient privileges to access the store.

Cause: The Lync Server failed to initialize with the configured certificate.
Resolution:
Review and correct the certificate configuration, then start the service again.

Event ID 14649

Answer 1

@Jiang_WeiWei TS/IT(姜伟为) ,

According to your description, this issue is related to certificate.

The root cause is after the December update, Windows Server 2012 no longer trust the certificate that is trusted before.

You need to put the intermediate CA certificates in the Intermediate Certification Authorities store. After installed successfully, the Lync Server Access Edge Service will be successfully started.

---

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.