Lync Server 2013 Role: Lync Edge
Base Operating System: Windows Server 2012
You attempt to start your Lync Server 2013’s Edge server’s Lync Server Access Edge service but notice that the service fails with the following message:
Windows could not start the Lync Server Access Edge on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to the service-specific error code -2146762487.
Reviewing the System logs on the Edge server show event ID 7024 errors logged:
The Lync Server Access Edge service terminated with the following service-specific error: A Certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
You confirm that the root certificate issuing your Edge server’s certificate is listed in the Trusted Root Certification Authorities:
You review the certificate assigned to the external interface for the Edge server in the MMC and notice that the certificates in the chain are all listed as This certificate is OK.:
For those who have came across one of my previous posts:
Lync Server 2013 Edge server replication issues on Windows Server 2012
… will know that I’ve ran into a few challenges with Lync Server 2013 Edge servers on a Windows Server 2012 operating system. As noted in the post above, Windows Server 2012 is more stringent when it comes to trusted certificates and actions such as mistakenly putting an intermediate certificate in the trusted root certificate store can cause replication to stop working between the Edge and front end server. What was interesting about this problem indicated in this post is that I had the issuing root certificate on the server’s Trusted Root Certification Authorities and while all indications point to the server trusting the certificate being used by the Edge server, the services did not. What I ended up having to do to correct this problem was import the intermediate certificate in the chain into my Intermediate Certification Authorities:
A bit strange but something I can live with going forward.