![\"\"](\"http:\/\/blog.escarra.org\/wp-content\/uploads\/2012\/12\/Shot11.jpg\" "\\"Shot1\\"")
<\/a><\/p>\nIf your Edge server’s Trusted Root CA store contains over 100 entries, the SChannel security package will truncate this list internally and depending on where your internal Root CA sits in the alphabetical order, it could be truncated and affect the ability to replicate the Lync topology over HTTPS 4443.<\/p>\n
To resolve this issue, there are two options:<\/p>\n 1. Delete unnecessary certificates from the Trusted Root CA store of the Edge server. This could potentially affect federated partners depending on which Root CAs you delete, but is a quick and easy way to fix the problem.<\/p>\n 2. Edit the registry on the Edge server to add a DWORD<\/strong> value, SendTrustedIssuerList<\/strong>, to the HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\u00a0<\/strong>key and assign it a value of 0. \u00a0This will prevent schannell.dll from truncating the Root CA list from the edge server, and allow validation tests to pass.<\/p>\n<\/a><\/p>\n