Handshake Error 336027900 between Cisco Expressway – SBA Lync 2013

Hi guys!

Sometimes when you integrate Videoconference Cisco Expressway with Skype for Business server 2015, and you have a Lync 2013 SBA (usually AC mediant 800) in the topology of Skype for Business, you receive the following handshake error: “handshake error 336027900 on incoming connection”

2019-04-19 18:50:38.789 Info handshake error 336027900 on incoming connection 2902 from to
2019-04-19 18:50:39.404 Info handshake error 336027900 on incoming connection 2904 from to
2019-04-19 18:50:39.965 Info handshake error 336027900 on incoming connection 2903 from to

To solve this, you need to enable TLS 1.2 on Windows Server 2008 r2 OSN Module. By Default, this entry is disabled on WS 2008 and WS 2008 r2. To enable you can follow the next steps or visit official documentation from here.

Step 1

Connect to Lync 2013 SBA OSN module as you want, RDMAN or Terminal Server. Then go to regedit console:

09-05-2019 16-03-34
Step 2

Add keys to registry as the following:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]

To do this, go to the path:

HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Control > SecurityProviders > SCHANNEL >Protocols

Then, click with right button and select “New”, “Key”:

09-05-2019 16-05-03

…and create the key “TLS 1.2”:

09-05-2019 16-05-34
Now, you need to create the subkeys “server” and “client”:

09-05-2019 16-07-54

When you have this, you need to create a “Enabled” DWORD entry with value 1 on “server” path:

09-05-2019 16-12-16

Done this, create a “DisableByDefault” DWORD entry with value 0 on “Client” path

09-05-2019 16-31-10-2
Well, Now you need to reboot the server to apply changes. When the server restart, the handshake errors will desappeared

NOTE! Is very important that you have the security update than allow enable compatibility with TLS 1.1 and TLS 1.2

I hope this information was helpful for you.

Thanks & Regards


Front End Crash After install December 2017 CU

Hello All

I have encountered a issue after install SFB Cumulative Update December 2017.

The issue was that Front End Server service didsn’t start.


I tried to uninstall all December updates and also May 2017 updates and install december CU again, but it didn’t works. In fact, a new message showed at the command prompt

InstallfailedBecause logs didsn’t show me much more information, I surfed internet searching for a solution, but I couldn’t find anything.

After review most of Microsoft Articles without success. I checked the machine again and I discover that Disc C: of my front end had less than 1Gb free. Then I asked myself… Could this be the cause?

I searched One more time on the installation logs. In one of them (Principal Log takes to another log, and then to another, and then to another…) I could find this:

An error occurred: “Microsoft.Rtc.Management.Deployment.DeploymentException” “Install-CsDatabase was unable to find suitable drives for storing the database files. This is often due to insufficient disk space; typically you should have at least 32 GB of free space before attempting to create databases. However, there are other possible reasons why this command could have failed. For more information, see http://go.microsoft.com/fwlink/?LinkId=511023”

So, I tryed expand disk for another 20 Gb and Try to install CU again.


Finally It worked and FE Service gone up correctly.


I hope this information will be usefull for you

Thanks & regards

CQD – Issue Version QoEMetrics

Hi all

I have encountered a little problem with the installation of CQD:


I was searching for the solution of this issue, I surfed in much web pages, much of Technet articules says what is the version that you need to have in your SFB QoEMetrics database. But I can’t find anything about the user that is needed to use for the installation process.

To detect if the problem is the version of QoEMetrics or the user privilege rights, try to execute a test-csdatabase with the affected user to get the database version. If you get a result like the image below, your user haven’t the appropiate permissions.


To solve this issue, use a user with the appropiate permissions or grant to the user administrative permissions in the database.


I hope this information will be useful for you


Audiocodes – Solve Issues with accented DisplayNames

Sometimes you have on a site some users with a display Name with special Characters. Well, if you have an audiocodes in the site you can have a problem. Audiocodes doesn’t accept calls with special characters in the display name by default. The ISO 8859 charset is the cause.


Calls always fail. But if you change the number to another user without special characters, the call can be made.


To solve this problem you need to apply in your Audiocodes the ISO 8859 charset:

“iso8859-charset no-accented”

Please, follow next steps to apply the ISO 8859:

Connect to Audiocodes with SSH, and enable the appliance to configure with administrator password


Next step, type “configure voip” to access to Voip configuration page.


Then, type “gw digital gw digital-gw-parameters” to access to GW Configuration.


Next step, type “iso8859-charset not-accented” to enable this charset, and then type “activate” to activate new features.


And then, exit from configure page and restart the appliance.

I hope this information will be useful for you


503 error in CQD Portal

It is possible that you have this problem at any time.

Sometimes CQD Portal can be in error with error code 503 service unavailable.

Well, sometimes you need to install certain applications with privilege users that, for enterprise policies, it can’t have a password thar never expires. This is a very high problem to our administration, but sometimes we can’t fight with the Security Policy of the Company.

In this hand, it is possible that you find this problem at any time


This error will be following by a IIS event like this:


And then, you will finded the QoEPortal Application Pool disabled:


Ok, so this problem can appear by a user and password problem. Did you change your password a few days ago? It can be the problem.

To solve this issue you can following the next steps (it’s Easy):

Go to the IIS Administration Portal, next go to Application Pools and then select QoEPortal pool and clic on right button, then select Advanced Settings:


Now, below Process Model menu select Identity and clic on suspensive points


In the new window, clic en SET and introduce the new password.


After that, apply all settings and restart the pool, if it is necessary realize a IIS Reset.

Well… It’s magical!s CQD Portal works once more time!


I hope this information will be useful for you.

Thank you

Best Regards

Skype For Business with Skype Issues

Hello guys!

Today I have a very appetizing mushroom. Perhaps you have had at anytime a problem with your Skype to Skype for Business integration.

I describe the problem:

Some users advise you that they can contact with Skype users, but Skype users can’t view presence and doesn’t have chat with Skype for business users, for example:


If you have tested your deployment, and you followed all steps from Technet guidance: https://technet.microsoft.com/en-us/library/dn705313.aspx

Also you checked your firewall and everything is allowed. Keep calm, you are not crazy. Your environment are correctly configured, but you have some users that are using Lync 2013 (With or without skype for business interface). Please, follow next steps to solve your issue.

Check if your users with those clients have next configuration:


If not, please apply it and try again.

Open your client options and go to ‘alerts’. On ‘contacts not using Skype for Business’ menu, check ‘allow anyone to contact me’. The problem will be resolved.

I hope this information will be useful for you.


Users on Limited Features when Audiocodes Gateway Restart (Issue?)

When you restart your Audiocodes Gateway, your users change their status to “Limited features”?



Have you ever asked yourself why you lost connectivity with your SBA when you reboot your Audiocodes Gateway?

Here is the answer:


If you have an Audiocodes Mediant as SBA, you know that it is necessary to use the WebGui to configure it (This is Awful!). Deployment Wizard can’t be used, because Audiocodes SBAs doesn’t have bootstrapper.exe and Deployment Wizard doesn’t work.

As you know, Audiocodes Mediant have many modules. It have a Gateway module, an OSN module (for Operating System) and also it have a little switch module, this module is internal and it isn’t available to configure (as far as I know).

Well, known this. On WebGui for the SBA configuration. We will asked for IP Settings. In this moment, we can select one of the four network interfaces of the Audiocodes OSN Module: two internal interfaces and two external interfaces.


THIS IS VERY IMPORTANT! You can choose anyone, but if you choose one of the internal interfaces, you are choosing an interface that it is connected directly with the internal little switch. So if you need to restart the gateway module (for any reason), you also restart the little switch, so you will lose connectivity with your SBA and your users will enter on survival mode.


If you have two core network ports to connect both modules (Gateway and OSN), always choose external network interface, in this way you will have the two modules separated for modifies, troubleshooting or any other thing that you need.

If you have only the possibility of a core network port, and you need to use internal interface, you will remember that if you make changes on the gateway that requires restart, you will lose connectivity with your SBA and you users show the message and they will have limited features while the gateway is restarting.

I hope this information will be useful