Skype Edge Server Event 3045

Skype Edge Server Event 3045 – LS Replica Replicator Agent Service

Skype Edge Server Event 3045. You may decide to do a “SSL Server test” to get an Overall Rating “x” in terms of Security from your Internet SfB public services announced.

This can be done from SSL Labs site: https://www.ssllabs.com/ssltest

After running this, you may see that the rating is not as good as you would like to, and you read this: “This server supports TLS 1.0 and TLS 1.1. Grade capped to B.”

Then you decide to improve the Overall Rating, disabling TLS 1.0 and TLS 1.1 on your organization Skype for Business edge servers.

As a result, the Overall Rating changes to A+, so in terms of Security everything is fine.

The problem is that:

• After disabling TLS 1.0 and TLS 1.1 on organization Skype for Business Edge servers, it appears all the time in the event viewer of the Edge servers this error:

Event 3045, LS Replica Replicator Agent Service
“The replication synthetic transaction has not been updated in a significant time period.

Time since the last update: 08.23:09:23
Cause: The Master Replicator Agent has not updated the replication transaction document in a significant time period.
Resolution:
If other replicas are experiencing similar issues, check the Master Replicator Agent and File Transfer Agent service health. Verify access to the DFS files shares and replica file shares”

It also appears your organization Skype for Business Edge servers in System Center Operations Manager console, as “Critical” status, because of the before, so you can’t monitor them properly.

If you enable again for testing TLS 1.0 and TLS 1.1 on your Skype for Business Edge servers, you see that replication is working fine almost instantly.

So definitely, there is cause-effect correlation.

Normally, you would have to perform the changes in the article: https://docs.microsoft.com/en-us/skypeforbusiness/manage/topology/disable-tls-1.0-1.1, installing prerequisites to all Edge servers and also on the Front End Servers too. But, you can just fix this with a small subset of what needs to be done on the Edge servers.

Step 1: Add the following to the registry to all Skype for Business Frontend’s:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319]

“SchUseStrongCrypto”=dword:00000001

Step 2: To restart File Transfer Agent service in all Frontends of the pool that holds the Central Management Store.

If you have several pools, you can check the pool that holds the CMS, running this command: “Get-CsManagementStoreReplicationStatus -CentralManagementStoreStatus”

Step 3: To check.

It should work.

You can check running this powershell command: “Get-CsManagementStoreReplicationStatus | Where-Object {$_.UpToDate -eq $True} | ft”

The ones in green, are the Skype for Business Edge servers that are replicated correctly.

After doing this, the event viewer from the Edge Servers, stopped displaying these events: “Skype Edge Server Event 3045 – LS Replica Replicator Agent Service” and also in the System Center Operation Manager console the Edge servers appear healthy.

More content regarding Skype for Business, can be found here.