Microsoft KB Archive/837383

= Users may receive a &quot;Signing in to the SIP Communications Service failed because your program is not configured to use the TLS Transport while in high-security mode&quot; error message when they try to sign in to Office Live Communications Server 2003 =

Article ID: 837383

Article Last Modified on 3/19/2004

-

APPLIES TO


 * Microsoft Office Live Communications Server 2003
 * Microsoft Windows Messenger 5.0

-



Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SYMPTOMS
When one or more Microsoft Windows Messenger 5.0 users try to sign in to Microsoft Office Live Communications Server 2003, those users receive the following error message:

Signing in to the SIP Communications Service failed because your program is not configured to use the TLS Transport while in high-security mode. Please contact your network administrator to correct this problem.



CAUSE
This issue may occur if the Windows Messenger client program is configured to use high-security mode. This mode disables TCP communications with Live Communications Server and enforces the use of Transport Layer Security (TLS) with Office Live Communications Server 2003.



RESOLUTION
To troubleshoot this issue, use one or both of the following methods in the order that they are presented.

Method 1: Disable Session Initiation Protocol (SIP) high-security mode by using Group Policy
Create a Group Policy object to disable high-security mode for SIP communications. To do this, follow these steps:
 * 1) On a domain controller, start Active Directory Users and Computers.
 * 2) Right-click the domain or the organizational unit that contains the user accounts that you experience this problem with, and then click Properties.
 * 3) Click the Group Policy tab, and then click New.

Note If you already have a policy that is configured to modify Windows Messenger communications, modify that policy instead of creating a new Group Policy object.
 * 1) Type a name for the Group Policy object, and then press ENTER.
 * 2) Click Edit, expand Computer Configuration, right-click Administrative Templates, and then click Add/Remove Templates.
 * 3) Click Add, open the Setup\I386 folder on the Office Live Communications Server 2003 CD, click rtcclient.adm, and then click Open.
 * 4) Click Close.
 * 5) Under Computer Configuration, expand Administrative Templates, expand Windows Messenger Policy Settings, and then click SIP Communications Service Policies.
 * 6) In the right pane, double-click Require SIP high-security mode, click Disabled, and then click OK.
 * 7) Quit Group Policy Object Editor, and then click Close.

Note If a Group Policy object is configured to require high-security mode for SIP communications, and if that Group Policy object is at a higher level than the Group Policy object that you created, you must modify or temporarily disable that Group Policy object so that it no longer requires high-security mode for SIP communications.
 * 1) Restart the client computer that Windows Messenger is running on, and then try to sign in to Live Communications Server.

Method 2: Disable high-security mode in the Windows registry
If the Windows Messenger user cannot sign in to Live Communications Server successfully, verify that high-security mode is not specified in the registry. To do this, follow these steps.

Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.  On the client computer where the Windows Messenger user cannot sign in to Live Communications Server, start Registry Editor. To do this, click Start, click Run, type regedit in the Open box, and then click OK. Locate and then click the following registry subkey:

 On the File menu, click Export. Type a name for the exported registry file, and then click Save. Delete the EnableSIPHighSecurityMode registry entry if it exists. To do this, right-click EnableSIPHighSecurityMode, click Delete, and then click Yes to confirm the removal of this registry entry. Quit Registry Editor, and then restart Windows.</li> Sign in to Live Communications Server.</li></ol>

Additional query words: LCS, chat, IM, instant messaging

Keywords: kbprb KB837383

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.