If you get the following message when trying to sign in to Skype for Business on a Skype Room System, chances are the user domain ([email protected]) does not match that on the certificate (e.g. edgeserver.differentdomain.com).
“Sign in failed due to untrusted domain”
The Skype for Business Windows client prompts you in this situation and you can take action to trust the certificate. In Skype Room System this does not happen, and you need to manually add a registry key.
To do this you need to log in as an admin to the Windows desktop. Open registry editor and navigate to the following path:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SkypeRoomSystem
- Right-click the SkypeRoomSystem container and then select New > String Value
- Type TrustModelData and then press ENTER
- Right-click TrustModelData and then click Modify
- In the Value date box, add the name of the domain that appears on the Lync Web Service certificate – this value supports a comma-separated list of servers to trust if you have more than one
- Close the Windows Registry
- Click Apply and Restart to save your changes
