Skype for Business cannot access Master Street Address Guide (MSAG)

Symptoms

When testing civic addresses against an E911 provider’s Master Street Address Guide (MSAG) using the Test-CsLisCivicAddress cmdlet it returns an error.

Error

The request was aborted: Could not create SSL/TLS secure channel.

Event Log 

Log Name: System
Source: Schannel
Event ID: 36870
Level: Error
Description:
A fatal error occurred when attempting to access the SSL client credential private key. The error code returned from the cryptographic module is 0x8009030D. The internal error state is 10003.

Background

The Test-CsLisCivicAddress cmdlet uses a pre-installed personal certificate issued by the E911 service provider to provide secure authentication and communication with the provider’s MSAG database. The certificate is installed using the Set-CsLisServiceProvider cmdlet, but only on the computer where the cmdlet is executed. If Test-CsLisCivicAddress cmdlet is executed on a computer where the Set-CsLisServiceProvider has not been executed you will experience the above described symptoms.

Resolution

Execute Set-CsLisServiceProvider cmdlet on any computer or server where running the Test-CsLisCivicAddress cmdlet is needed. The original E911 provider certificate and password will be required.

References

• Testing civic addresses against the master street address guide in Lync Server 2013
• Microsoft Docs: Test-CsLisCivicAddress
• Microsoft Docs: Set-CsLisServiceProvider
• Blog: Unable to validate location information with provider