We have a Skype for Business on-premise installation.
3 front-end servers
1 Edge server (in a DMZ)
load balancer in the DMZ for users outside the network
another load balancer on the internal network for the internal users
I've got everything working except one thing. With the Android app when I log on internally it connects but I have to click continue on a screen that says:
"Lync is attempting to redirect you to:
Issued by: the-name-of-my-internal-CA
Subject: internal-frontendpool domain name
Expires: a couple years down the road
Signature Algorithm: SHA256WithRSA"
I only get this error internally, not when connecting external.
I had this error externally as well but was able to get rid of it by importing the root certificate chain from my internal CA into the load balancer and "linking it" to the public cert we installed.
The load balancer we...