The Unified Messaging server failed to exchange the required certificates with an IP gateway to enable Transport Layer Security (TLS) for an incoming call. Check that this is a configured TLS peer and that the correct certificates are being used. More information: %1.

Details
Product: Exchange
Event ID: 1113
Source: MSExchange Unified Messaging
Version: 8.0
Symbolic Name: IncomingTLSCallFailure
Message: The Unified Messaging server failed to exchange the required certificates with an IP gateway to enable Transport Layer Security (TLS) for an incoming call. Check that this is a configured TLS peer and that the correct certificates are being used. More information: %1.
   
Explanation

This Warning event indicates that the Transport Layer Security (TLS) handshake has failed on an incoming call to the computer that is running the Unified Messaging server role. TLS handshake is responsible for connection establishment, encryption keys negotiation, certificates exchange, and authentication between the Unified Messaging (UM) server and IP/VoIP gateway. This event may be caused by one or more of the following:

  • There are certificate issues, such as an expired certificate presented by the IP/VoIP gateway.

  • The certificate presented by the IP/VoIP gateway includes an incorrect target name.

  • The certificate presented by the IP/VoIP gateway is not trusted by the server.

  • The certificate presented by the IP/VoIP gateway has been revoked by the certification authority.

  • The certificate presented by the UM server does not exist in the local certificate store.

  • The certificate presented by the UM server is not trusted by the IP/VoIP gateway.

  • IP/Vo IP gateway disconnected the call during the TLS handshake negotiation.

   
User Action

To resolve this error, do one or more of the following:

  • Make sure that the certificates that are used by the Microsoft® Exchange Unified Messaging service and IP/VoIP gateway are valid and trusted by each other. Use the Get-ExchangeCertificate cmdlet or Certificate Manager to inspect the properties of the certificate that is used by the Exchange Unified Messaging service. For information, see Get-ExchangeCertificate in “Microsoft Exchange 2007 Help”. For information about how to review the certificate that is used by IP/VoIP gateway, contact the hardware vendor or documentation of the devices for the correct procedures.

  • If this error frequently occurs, contact Microsoft Product Support. For more information, visit the Contact Us page of the Microsoft Help and Support Web site.

If you are not already doing so, consider running the tools that Microsoft Exchange offers to help administrators analyze and troubleshoot their Exchange environment. These tools can help you make sure that your configuration is in line with Microsoft best practices. They can also help you identify and resolve performance issues, improve mail flow, and better manage disaster recovery scenarios. Go to the Toolbox node of the Exchange Management Console to run these tools now. For more information about these tools, see Toolbox in the Exchange Server 2007 Help.

Related:

Leave a Reply