Although Skype offers to set the correct date and time too, in fact, the error can occur for two different reasons:

  • Incorrect date and time settings
    To set the correct date and time on the computer:
    1. Open the “Control Panel” of the computer.
    2. Switch to Classic View (i.e., the icons view).
    3. Open the “Date & Time”, put the correct time zone and enable “Automatically adjust clock for Daylight Saving Time”.
    4. After this, open the tab “Internet Time” (if you have Windows 7, click “Change settings”).
    5. Enable the option “Automatically synchronize with an Internet time server”.
    6. Select “time.windows.com” server and click “Update now”.
    7. As a result, after a few seconds the inscription “Time was successfully synchronized 15/10/2016 at 22:46 from time.windows.com” must appear.
    8. Restart Skype and check if the error has disappeared.

  • Problems of Root Certificates
    As a rule, if you haven’t set the latest root certificates, the error “Content is blocked because it is not signed by a valid security certificate” also can appear on Skype. To solve the error:
    1. Download the file rootsupd.exe
    2. Run the installer of root certificates (if something went wrong, see below how to install root certificates manually).
    3. Restart Skype and check if the error has disappeared.

This article applies to Exchange 2010/2013/2016 customers only. Skype for Business / Lync Desktop and Mobile clients (for iOS, Android and Windows Phone) can be set up with user's email address and mailbox password only (without the need to enter Internal and External Discovery URLs). Please note: Skype for Business is currently available only to UO employees. Skype for business caches files locally on your PC or Mac to pull information quickly and efficiently. Sometimes you may need to clear your cache to resolve specific issues. This article explains how to clear your cache on your PC or Mac.


If the instruction has helped you to solve the error, write in the comments, it is desirable to specify the Skype version and operating system, in order to know exactly, for what computers this manual is suitable. Of course, any advice to improve this article is welcomed.

Skype For Business View Settings

How to install root certificates manually

  1. Save the file rootsupd.exe (the main thing, not on the system drive). For example, I have saved it on the E: drive in the folder Roots. The full path is E:roots, and this is the way used in the following commands (if necessary, change the E:roots for the desired way).
  2. Run command prompt with administrator privileges
  3. Execute the following commands (copy them one by one and press Enter):
    cd /d E:roots
    rootsupd.exe /c /t:E:roots
    updroots.exe authroots.sst
    updroots.exe updroots.sst
    updroots.exe -l roots.sst
    updroots.exe -d delroots.sst

Attention!

If you have failed to correct the error with the help of these instructions:
  1. In Internet Explorer, open the page Check access to Skype.
  2. Click “Check” and after the test is completed, copy the link to the result.
  3. Leave a comment on this page, with the link and the version of Skype.

Procedure

The Office 365 DNS setup must be completed. A valid Skype for Business license muste be assigned in the Office 365 Admin Portal and the latest version of Skype for Business should be installed.

Certificates
  1. Make sure that your computer clock is set to the correct time because Skype uses a timestamp as part of the authentication process. If the time is more than 5 minutes off, you will not be able to sign-in and should correct the time and try to sign-in again.
  2. Next try the Office 365 Skype setup for manual configuration:
    1. Click the Settings icon in the upper-right, Tools, then Options.
    2. Click Personal and the Advanced button.
    3. Enter sipdir.online.lync.com:443 as the Internal and External server under Manual configuration.
    4. Click OK twice and try to sign-in again.

If the above fails, then follow the steps below:

Skype Certificate Error

  1. Exit the Skype client completely. Ensure that it is not still running in the system tray.
  2. Open an administrative command prompt, type the following, and hit enter: ipconfig /flushdns.
  3. Locate and delete all folders under: %LOCALAPPDATA%MicrosoftOffice16.0Lync
  4. Make sure that you can successfully connect to the Web-Ticket service by navigating to: https://webdir.online.lync.com/WebTicket/WebTicketService.svc/mex
    If the URL above connects successfully and a page loads, then the Web Ticket service is running properly and there are no connectivity issues.
  5. Try to delete/renew the user’s SIP certificate.
    1. Open the Certificate Manager by going to Start > Run and typing certmgr.msc
    2. Expand Personal > Certificates
    3. Sort by the Issued By column and look for a certificate issued by Communications Server.
    4. Delete the certificate.
  6. Remove User's URI
    1. Open Regedit and navigate to the following path and delete the folder: HKEY_CURRENT_USERSoftwareMicrosoftSharedUcClient.
    2. Navigate to HKEY_CURRENT_USERSoftwareMicrosoftOffice. Then open 15.0 or 16.0 depending on your version of office.
    3. Find the key for Lync and open it.
    4. Delete the Data for the strings named ServerSipUri and ServerUsername.

Try to sign into Skype for Business again. If none of this helps, contact your administrator to open a case with Microsoft.