Skip Ribbon Commands
Skip to main content

Xadean's Empirical Musing

:

Quick Launch

Xadean's Empirical Musing > Posts > CMS Replication (XDS) Not Working Between Front End & Edge Servers After Disabling Weak Protocols & Ciphers
February 27
CMS Replication (XDS) Not Working Between Front End & Edge Servers After Disabling Weak Protocols & Ciphers

Microsoft Case #: 13231981

Created on: Thursday, February 21, 2019

Support request number: 119022124001575

Product: Skype for Business Server 2015 (on-premises)

Issue: CMS Replication (XDS) Not Working Between Front End & Edge Servers After Disabling Weak Protocols & Ciphers

Description: Output of "Get-CsManagementReplicationStatus" shows false in UpToDate field for all Edge Servers in the on-premises deployment following execution of "Invoke-CsManagementStoreReplication" PS cmdlets. LastUpdateCreation shows a date in July 2018 of last year. Skype for Business (SFB) Control Panel showing red X next to Edge Servers in Topology. After capturing a debug trace of the replication process with CLSLogger tool, observed the following error message:

TL_WARN(TF_COMPONENT) [FEPoolNAME\FEServerNAME]1E14.0AA8::02/15/2019-19:29:20.931.00002004 (XDS_File_Transfer_Agent,FileTransferTask.CopyFilesFromReplicaUsingWcf:filetransfertask.cs(755)) (0000000002FFC0E0)[FileTransferTask(6, 2/15/2019 11:26:49 AM): {TASK_NOT_STARTED, fromReplica, [FEServerNAME.fqdn, HttpsWebService, 4443], 0}] Failed to copy files from replica. Exception: [System.ServiceModel.CommunicationException: An error occurred while making the HTTP request to https:// FEServerNAME.fqdn:4443/ReplicationWebService. This could be due to the fact that the server certificate is not configured properly with HTTP.SYS in the HTTPS case. This could also be caused by a mismatch of the security binding between the client and the server. ---> System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a send. ---> System.IO.IOException: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host

Also noticed the following error messaging after executing "Get-CsPoolFabricState -PoolFQDN FEPoolName.FQDN" PS cmdlet:

PS C:\Users\xahmasi> Get-CsPoolFabricState -PoolFqdn FEPoolName.FQDN

Get-CsPoolFabricState : An error occurred while receiving the HTTP response to

https:// FEServerName.FQDN /LiveServer/UserPinManagement/FabricManagement/. This could be due to the service endpoint

binding not using the HTTP protocol. This could also be due to an HTTP request context being aborted by the server

(possibly due to the service shutting down). See server logs for more details.

At line:1 char:1

+ Get-CsPoolFabricState -PoolFqdn FEPoolName.FQDN

+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+ CategoryInfo : InvalidOperation: (:) [Get-CsPoolFabricState], CommunicationException

+ FullyQualifiedErrorId : Error getting fabric state. For details, see inner exception.,Microsoft.Rtc.Management.H

ADR.FabricState.GetOcsPoolFabricStateCmdlet

Root Cause: The Windows Communications Framework (WCF) does not by default use TLS 1.1 or 1.2.  Instead, it uses TLS 1.0 and RC4 ciphers (specifically TLS_RSA_WITH_RC4_128_SHA).  These weak protocols (i.e. SSL 2.0/3.0 and TLS 1.0) and ciphers (i.e. RC2, RC4, DES, and 3DES) had been disabled due to governance compliance.

Resolution: In order to fix, under following keys for all the version key listed like V1.0, V2.0.50727,v3,v4.0.30319, create key "SchUseStrongCrypto" (type DWORD, value 1):

HKLM\software\Wow6432Node\Microsoft\.NETFramework\

HKLM\software\microsoft\,NETFramework\

After adding this key to and rebooting all Edge / Front End Servers and executing invoke-CsManagementReplicationStatus, the UpToDate status on all Edge / Front End Servers is showing True and there is a green check next to all Edge  / Front End Servers in the Skype for Business Control Panel under Topology.

Reference(s): https://blogs.msdn.microsoft.com/benjaminperkins/2014/11/04/using-tls-1-2-with-wcf/

 

 

 

Comments

Re: CMS Replication (XDS) Not Working Between Front End & Edge Servers After Disabling Weak Protocols & Ciphers

Thanks -- spent hours googling for a replication issue and this was the answer. Not found anywhere else!
 on 3/21/2020 8:11 PM

Applied same security hardening for Edge servers only

Applied same security for Edge servers only - Do we need to still apply the reg key fix for front end server or only my Edge servers where security has been hardened.
 on 10/10/2020 12:31 PM

Yeezy Slides

https://www.yeezyofficialwebsite.us.com/ Yeezy Official Website
https://www.yeezy--shoes.us.com/ Yeezy Shoes
https://www.yeezysupply.us/ Yeezy Supply
https://www.yeezyshoess.org/ Yeezy Shoes
https://www.adidas-yeezyshoess.com/ Yeezy Shoes
https://www.adidas-yeezyshoess.com/ Adidas Yeezy
https://www.adidas-yeezyslides.com/ Yeezy Slides
https://www.adidas-yeezyslides.com/ Adidas Yeezy
https://www.yeezy350.us/ Yeezy 350
https://www.yeezyofficialwebsite.us/ Yeezy Official Website
https://www.yeezyofficialwebsite.com/ Yeezy Official Website
https://www.lvoutlet.us.com/ Louis Vuitton
https://www.lvoutlet.us.com/ Louis Vuitton Outlet
https://www.lvoutlets.us.com/ Louis Vuitton
https://www.lvoutlets.us.com/ Louis Vuitton Outlet
https://www.louis-vuitton-outlets.us.com/ Louis Vuitton
https://www.louis-vuitton-outlets.us.com/ Louis Vuitton Outlet
https://www.lv-outlet.us.com/ Louis Vuitton
https://www.lv-outlet.us.com/ Louis Vuitton Outlet
https://www.yeezyshoes.de/ Yeezy Shoes
https://www.yeezysupplys.de/ Yeezy Supply
https://www.yeezy-slides.de/ Yeezy Slides
https://www.yeezy-supply.de/ Yeezy Supply
https://www.yeezy-350.de/ Yeezy 350
https://www.yeezyshoess.us/ Yeezy Shoes
https://www.yeezy-slidess.us/ Yeezy Slides
https://www.adidayeezy.us.com/ Adidas Yeezy
https://www.yeezyadidas.us.com/ Yeezy Adidas
https://www.yeezysupplys.com/ Yeezy Supply
https://www.adida.us.com/ Adidas Yeezy
https://www.yeezy2024.us.com/ Yeezy 2024
https://www.yeezys-supply.us.com/ Yeezy Supply
https://www.yeezys-supplys.us.com/ Yeezy Supply
https://www.yeezy-slidess.us.com/ Yeezy Slides
https://www.yeezy350official.us.com/ Yeezy 350
https://www.yeezy350official.us.com/ Yeezy Official
https://www.yeezyshoesofficial.us.com/ Yeezy Shoes
https://www.yeezyshoesofficial.us.com/ Yeezy Official
https://www.yeezys-supplys.com/ Yeezy Supply
https://www.yeezys-shoes.com/ Yeezy Shoes
https://www.yeezy-350.com/ Yeezy 350
https://www.yeezys-slidess.com/ Yeezy Slides
https://www.yeezysupplyofficial.us.com/ Yeezy Supply
https://www.yeezysupplyofficial.us.com/ Yeezy Official
https://www.yeezyslidesofficial.us.com/ Yeezy Slides
https://www.yeezyslidesofficial.us.com/ Yeezy Official
https://www.yeezyboost350v2.us.com/ Yeezy 350
https://www.yeezyofficialwebsites.com/ Yeezy Official Website
https://www.yeezyofficialwebsites.us.com/ Yeezy Official Website
https://www.yeezyshoesofficialwebsite.us/ Yeezy Shoes
https://www.yeezyshoesofficialwebsite.us/ Yeezy Official Website
https://www.yeezy-supply.us/ Yeezy Supply
https://www.yeezy-350.us/ Yeezy 350
https://www.adidasyeezyshoess.com/ Yeezy Shoes
https://www.adidasyeezyshoess.com/ Adidas Yeezy
https://www.yeezysslidess.com/ Yeezy Slides
https://www.adidasyeezys.us.com/ Adidas Yeezy
https://www.adidas-yeezy-slides.us.com/ Yeezy Slides
https://www.omegaswatches.net/ Omega Watches
https://www.moncleroutletfactory.com/ Moncler Outlet
https://www.icasejpn.com/  ルイヴィトン vuitton iphone15 proケース

Tags:Yeezy Shoes,Yeezy,Yeezy Supply,Adidas Yeezy,Yeezy Slides
 on 6/12/2024 11:05 AM

yeezy

https://www.yeezyslidess.us.com/ Yeezy Slides
https://www.yeezys350.us.com/ Yeezy 350
https://www.yeezyofficialsite.us.com/ Yeezy Official Site
https://www.officialyeezysupply.com/ Yeezy Supply
https://www.yeezyslidesofficialwebsite.us.com/ Yeezy Slides Official Website
https://www.yeezyslidess.us.com/category/yeezys-350/ Yeezy 350
https://www.yeezyfoamrunner.net/ Yeezy Foam Runner
https://www.yeezyslides.us.com/ Yeezy Slides
https://www.yeezy-shoes.us.com/ Yeezy Shoes
https://www.yeezy-shoes.us.com/category/yeezys-slides/
https://www.yeezy-supplys.us.com/ Yeezy Supply
https://www.yeezy-foamrunner.com/ Yeezy Foam Runner
https://www.yeezyshoess.us.com/category/yeezys-slides/
https://www.yeezyshoess.us.com/ Yeezy Shoes
https://www.yeezysupplys.us.com/ Yeezy Supply
https://www.yeezyslidess.com/ Yeezy Slides
https://www.yeezyslidess.us.com/ Yeezy Slides
https://www.yeezyfoamrunner.net/ Yeezy
https://www.yeezyslides.us.com/ Yeezy Slides Website
https://www.yeezy-shoes.us.com/ Yeezy
https://www.yeezy-supplys.us.com/ Yeezy Shoes
https://www.yeezy-foamrunner.com/ Yeezy
https://www.yeezy-supplys.us.com/category/yeezys-slides/ Yeezy Slides
https://www.yeezyshoess.us.com/ Yeezy Shoes For Women
https://www.yeezysupplys.us.com/ Yeezy
https://www.yeezyslides.us.com/category/yeezys-500/ yeezy 500
https://www.yeezyslidess.com/ Yeezy Slides 2022
https://www.yeezyoutlets.com/ Yeezy Outlet
https://www.yeezyoutlets.com/category/yeezys-350/
https://www.yeezysupplywebsite.com/ Yeezy Supply Website
https://www.yeezysupplywebsite.com/category/yeezys-350/
https://www.yeezystore.org/ Yeezy Store
https://www.yeezyshoess.us.com/category/yeezys-350/
https://www.yeezystore.org/category/yeezys-350/
https://www.yeezysupplyshipping.com/ Yeezy Supply
https://www.yeezysupplyshipping.com/category/yeezys-350/
https://www.yeezyslidesprice.com/ Yeezy Slides Price
https://www.yeezysofficialwebsite.com/ Adidas Yeezy Official Website
https://www.yeezysofficialwebsite.com/category/yeezys-380/
https://www.yeezy-supplys.us.com/category/yeezys-350/
https://www.yeezy-supplys.us.com/category/yeezys-380/
https://www.yeezy-shoes.us.com/category/yeezys-350/
https://www.yeezy-supplys.us.com/sitemap.xml
https://www.yeezyoutlets.com/sitemap.xml
https://www.yeezystore.org/sitemap.xml
https://www.yeezysupplywebsite.com/sitemap.xml
https://www.yeezyslidess.us.com/sitemap.xml
https://www.yeezyfoamrunner.net/sitemap.xml
https://www.yeezyslides.us.com/sitemap.xml
https://www.yeezyslidesprice.com/sitemap.xml
https://www.yeezyslidess.us.com/sitemap.xml
https://www.yeezy-shoes.us.com/sitemap.xml
https://www.yeezysupplyshipping.com/sitemap.xml
https://www.yeezysofficialwebsite.com/sitemap.xml
https://www.yeezyshoess.us.com/sitemap.xml
https://www.yeezyslidess.com/sitemap-misc.xml
https://www.yeezyslidess.com/sitemap-post-2022.xml
https://www.yeezyslidess.com/sitemap-post-2015.xml
https://www.yeezyslidess.com/sitemap-post-2014.xml
https://www.yeezyslidess.com/sitemap-post-2013.xml
https://www.yeezyslidess.com/sitemap-blocks-2016.xml
https://www.yeezyslidess.com/sitemap-product-2024.xml
https://www.yeezyslidess.com/sitemap-featured_item-2016.xml
https://www.yeezyslidess.com/sitemap-category.xml
https://www.yeezyslidess.com/sitemap-post_tag.xml
https://www.yeezyslidess.com/sitemap-product_cat.xml
https://www.yeezyslidess.com/sitemap-featured_item_category.xml
https://www.yeezyslidess.com/sitemap-page.xml
https://www.yeezy-supplys.us.com/sitemap-misc.xml
https://www.yeezy-supplys.us.com/sitemap-post-2024.xml
https://www.yeezy-supplys.us.com/sitemap-post-2022.xml
https://www.yeezy-supplys.us.com/sitemap-post-2015.xml
https://www.yeezy-supplys.us.com/sitemap-post-2014.xml
https://www.yeezy-supplys.us.com/sitemap-post-2013.xml
https://www.yeezy-supplys.us.com/sitemap-blocks-2016.xml
https://www.yeezy-supplys.us.com/sitemap-product-2024.xml
https://www.yeezy-supplys.us.com/sitemap-featured_item-2016.xml
https://www.yeezy-supplys.us.com/sitemap-category.xml
https://www.yeezy-supplys.us.com/sitemap-post_tag.xml
https://www.yeezy-supplys.us.com/sitemap-product_cat.xml
https://www.yeezy-supplys.us.com/sitemap-featured_item_category.xml
https://www.yeezy-supplys.us.com/sitemap-page.xml
https://www.yeezyshoess.us.com/sitemap-misc.xml
https://www.yeezyshoess.us.com/sitemap-post-2022.xml
https://www.yeezyshoess.us.com/sitemap-post-2015.xml
https://www.yeezyshoess.us.com/sitemap-post-2014.xml
https://www.yeezyshoess.us.com/sitemap-post-2013.xml
https://www.yeezyshoess.us.com/sitemap-blocks-2016.xml
https://www.yeezyshoess.us.com/sitemap-product-2024.xml
https://www.yeezyshoess.us.com/sitemap-featured_item-2016.xml
https://www.yeezyshoess.us.com/sitemap-category.xml
https://www.yeezyshoess.us.com/sitemap-post_tag.xml
https://www.yeezyshoess.us.com/sitemap-product_cat.xml
https://www.yeezyshoess.us.com/sitemap-featured_item_category.xml
https://www.yeezyshoess.us.com/sitemap-page.xml
 on 6/16/2024 11:03 PM

Re: CMS Replication (XDS) Not Working Between Front End & Edge Servers After Disabling Weak Protocols & Ciphers

https://www.yeezyofficialwebsite.us.com/ Yeezy Official Website
https://www.yeezy--shoes.us.com/ Yeezy Shoes
https://www.yeezysupply.us/ Yeezy Supply
https://www.yeezyshoess.org/ Yeezy Shoes
https://www.yeezy350.us/ Yeezy 350
https://www.yeezyofficialwebsite.us/ Yeezy Official Website
https://www.yeezy-stores.us.com/ Yeezy Stores
https://www.yeezyslidesstore.us.com/ Yeezy Slides
https://www.yeezyslidesstore.us.com/ Yeezy Store
https://www.lvoutlet.us.com/ Louis Vuitton
https://www.lvoutlet.us.com/ Louis Vuitton Outlet
https://www.lvoutlets.us.com/ Louis Vuitton
https://www.lvoutlets.us.com/ Louis Vuitton Outlet
https://www.louis-vuitton-outlets.us.com/ Louis Vuitton
https://www.louis-vuitton-outlets.us.com/ Louis Vuitton Outlet
https://www.lv-outlet.us.com/ Louis Vuitton
https://www.lv-outlet.us.com/ Louis Vuitton Outlet
https://www.yeezyshoes.de/ Yeezy Shoesa
https://www.yeezysupplys.de/ Yeezy Supply
https://www.yeezy-slides.de/ Yeezy Slides
https://www.yeezy-supply.de/ Yeezy Supply
https://www.yeezy-350.de/ Yeezy 350
https://www.yeezyshoess.us/ Yeezy Shoes
https://www.yeezy-slidess.us/ Yeezy Slides
https://www.adidayeezy.us.com/ Adidas Yeezy
https://www.yeezyadidas.us.com/ Yeezy Adidas
https://www.adida.us.com/ Adidas Yeezy
https://www.yeezy2024.us.com/ Yeezy 2024
https://www.yeezyofficialwebsites.us.com/ Yeezy Official Website
https://www.yeezys-supply.us.com/ Yeezy Supply
https://www.yeezys-supplys.us.com/ Yeezy Supply
https://www.yeezy-slidess.us.com/ Yeezy Slides
https://www.yeezy350official.us.com/ Yeezy 350
https://www.yeezy350official.us.com/ Yeezy Official
https://www.yeezyshoesofficial.us.com/ Yeezy Shoes
https://www.yeezyshoesofficial.us.com/ Yeezy Official
https://www.yeezysupplyofficial.us.com/ Yeezy Supply
https://www.yeezysupplyofficial.us.com/ Yeezy Official
https://www.yeezyslidesofficial.us.com/ Yeezy Slides
https://www.yeezyslidesofficial.us.com/ Yeezy Official
https://www.yeezyboost350v2.us.com/ Yeezy 350
https://www.yeezyshoesofficialwebsite.us/ Yeezy Shoes
https://www.yeezyshoesofficialwebsite.us/ Yeezy Official Website
https://www.yeezy-supply.us/ Yeezy Supply
https://www.adidasyeezys.us.com/ Adidas Yeezy
https://www.adidas-yeezy-slides.us.com/ Yeezy Slides
https://www.yeezy-350.us/ Yeezy 350

Tags:Yeezy Shoes,Yeezy,Yeezy Supply,Adidas Yeezy,Yeezy Slides
 on 9/30/2024 10:54 AM

Re: CMS Replication (XDS) Not Working Between Front End & Edge Servers After Disabling Weak Protocols & Ciphers

 on 10/27/2024 9:53 AM

Add Comment

Title


Body *


CAPTCHA *

 

Attachments