Symptoms
This issue occurs when Federal Information Processing Standards (FIPS) for Response Group Service (RGS) is enabled in a Microsoft Skype for Business Server 2015 environment.
Additionally, when you establish application endpoints, you may see the following exception:
sip:RtcApplication-XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX@domain.com
sip:RtcApplication- XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX@domain.com sip:RtcApplication- XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX@domain.com Exception: System.Reflection.TargetInvocationException - System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.InvalidOperationException: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms. at System.Security.Cryptography.SHA512Managed..ctor() --- End of inner exception stack trace ---at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor)
at System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Security.Cryptography.CryptoConfig.CreateFromName(String name, Object[] args) at System.Security.Cryptography.SHA512.Create() at Microsoft.Rtc.Acd.Common.ConsistentHash`2..ctor(Func`2 nodeToHashKeyConverter, Func`2 requestToHashKeyConverter, Int32 virtualNodesMultiplier) at Microsoft.Rtc.Acd.MatchMaking.PresenceProvider.PresenceComponent.Initialize(IReadOnlyCollection`1 presenceEndpoints, Int32 maxRgsAgentsPerPresenceWatcher) at Microsoft.Rtc.Acd.MatchMaking.MatchMakingService.Start(IReadOnlyCollection`1 presenceEndpoints) at Microsoft.Rtc.Acd.AepManager.StartMMAndItsDependencies(IReadOnlyCollection`1 presenceEndpoints) Cause: Failed to connect to Front End server or the Front End server is misconfigured. Resolution: Check the Front End server for errors.Cause
This issue occurs because the MD5 and SHA512Managed classes don’t have FIPS enabled.
Resolution
To fix this issue, install the following cumulative updates:
-
May 2017 cumulative update 6.0.9319.281 for Skype for Business Server 2015, Response Group Service
-
May 2017 cumulative update 6.0.9319.281 for Skype for Business Server 2015, core components