Wednesday, June 19, 2013

Configure Fiddler for Lync Mobile sign-in troubleshooting



While we have the online utility (https://www.testexchangeconnectivity.com) to verify our Lync Mobility deployment’s functionality, sometimes the Lync administrator must deep dive into the sign-in process. Below I will describe a basic setup of both Fiddler and mobile devices for troubleshooting the process or… just plain fun, if you want to see what is happening under the hood.

Download and install Fiddler2 (http://fiddler2.com/get-fiddler). I always use the latest stable build… Do not start Fiddler after installation. There is one more executable we must install in order to enable tracing for iOS devices. Download and install the New Certificate Maker (http://fiddler2.com/r/?FiddlerCertMaker).

With both installed, start Fiddler and go to Tools -> Options



Go to the Connections tab and check “Allow remote computers to connect”. Click OK on the pop up note.



 The next step is to enable HTTPS Decryption. Go to the HTTPS tab and check “Decrypt HTTPS traffic".



Apparently Eric Lawrence has a good sense of humor – “Scary text ahead”, eh…

When set to decrypt HTTPS traffic, Fiddler works in (sort of) SSL Offload mode. Fiddler will make HTTPS requests from the local machine’s applications (or remote clients if it is configured to act as HTTP Proxy) re-encrypt with the “Fiddler Root Certificate” and then pass it to the application/client who made the request. This is because the Lync client for example, makes true HTTPS request and expects to receive answers via the established SSL channel. Without re-encryption, Fiddler would pass the answer from our reverse proxy as HTTP and the Lync client would say “Ughm, this is not what I expect”.

In a new window will you will be asked you to confirm the Fiddler root certificate installation. Click "Yes" to confirm on TrustCert confirmation screen.


At this point Fiddler is capable of decrypting local HTTPS traffic for further review. However, our goal is examine traffic between Lync and the mobile clients.

Right now, the newly generated Fiddler Root certificate is not present on the mobile device I'm going to test with. The first step is to export the certificate via the Fiddler Options screen.


The certificate can be now found on the desktop.


Because I will direct traffic from my phone to pass on TCP port 8888 (the default port Fiddler uses for HTTP proxy) via the machine Fiddler is installed. I will create a firewall exception from PowerShell. Note: You must run PowerShell as Administrator to create the rule.


Import-Module NetSecurity
New-NetFirewallRule -DisplayName "Fiddler Proxy Exception" -Description "Allow remote client to use Fiddler" -Protocol TCP -LocalPort 8888 -Enabled True -Profile Any -Action Allow -Verbose


Now I will email the certificate to myself, and then install it on my Windows 8 phone and iPad.



Once the email arrive on my WP8 device, I open it, click on the attachment and confirm the installation.




Next - configuration of the phone to use HTTP proxy for web requests. Select your Wi-Fi network...



...slide Proxy to ON, enter the IP Address of the workstation where Fiddler is installed and set the port (8888 if you used default).


To test the setup, I use Bing on the phone and search for “Lync 2013”. The expectation is Fiddler will show traffic coming from the phone.


Yup, it works! Now I will sign-in with my Lync 2013 Windows Mobile Client and watch the magic.


Oh joy. Clicking on a line will reveal the “under the hood” process.

Here are few screenshots of the iPad configuration steps.The steps are similar taken on WP8 device.

Install Fiddler Root Certificate:





Configure the Proxy:





Refer to your manufacturer's instructions how to setup other devices.

This setup can be used to trace and review sign-in process of both Lync Mobile 2010 and Lync Mobile 2013 clients. Fact is - I advice to do so and get familiar with the differences between MCX and UCWA services.

Oh, you can use Fiddler to troubleshoot Lync MX as well.

Install the EnableLoopback Utility (https://www.fiddler2.com/dl/EnableLoopbackUtility.exe)

If you have Lync MX already installed, when Loopback Utility screen opens, locate and check Lync app.

That's all, folks... Enjoy.


22 comments:

scurlaruntings said...

Awesome find! One small caveat you have to restart Fiddler after changing the 'Fiddler Options'.

Lincoln Madison said...

A toll-free virtual phone number gives your small business a large business presence at a fraction of a cost of what the traditional Toll Free Numbers would have cost you in the past.

Anonymous said...

Nice :)

Unknown said...

Thanks For sharing this Superb article.I use this Article to show my assignment in college.it is useful For me Great Work. mobile problems

Scrappur said...

Have you checked the BHIM App For Mobile and BHIM

Elizabeth J. Neal said...

The post is written in very a good manner and it contains many useful information for me.
Vehicle Signwriting Wolverhampton

Elizabeth J. Neal said...

Thanks for taking the time to discuss this, I feel strongly about it and love learning more on this topic.
Vehicle Signs Telford

Unknown said...

Good job in presenting the correct content with the clear explanation. The content looks real with valid information. Good Work

DevOps is currently a popular model currently organizations all over the world moving towards to it. Your post gave a clear idea about knowing the DevOps model and its importance.

Good to learn about DevOps at this time.


devops training in chennai | devops training in chennai with placement | devops training in chennai omr | devops training in velachery | devops training in chennai tambaram | devops institutes in chennai | devops certification in chennai

Quickbooks Online Support Phone Number said...

this is really amazing. thanks for sharing this with us.

albina N muro said...

You’ve got some interesting points in this article. I would have never considered any of these if I didn’t come across this. Thanks!. instagram followers app download for android

webroot.com/safe said...

Webroot.com/safe to opt best security for your all digital devices. No one can deny the fact that Internet is our primary need today and devices connected with internet are always in high risk of virus attacks.

webroot.com/safe said...

www.webroot.com/safe we are best in our Industry, In one click Install wsainstall exe from webroot.com/safe for Windows device.

www.trendmicro.com/bestbuypc said...

Computer security is the process of preventing and detecting unauthorized use of your computer. Prevention measures help you stop unauthorized users from accessing any part of your computer system.

Anonymous said...

https://zielonyflaming.pl Wow cuz this is extremely great work! Congrats and keep it up.

mikethomson said...

Really great post. I just unearthed your online journal and needed to say that I have truly delighted in perusing your blog entries. Any way I'll be subscribing to your food and I trust you post again soon. Huge much obliged for the valuable data. https://itprospt.com/live-wallpaper-windows-10

Aslam said...

I was facing the issue and with this trouble shooting method my issues has been resolved. Before it I won't be able to play or download any game or app in it.

yaman ban said...

thanks for this valuable post but the most appealing things are:
1. cactus jacket merch
2. ugg bath towel
3. dog foldable bed

Crave said...

Excellent information! I just discovered your site and have been following along.extra lives mod apk unlimited health I intended to post my initial remark. The only thing I can say is that I have.

News World said...

You are performing admirably and a multitude of individuals will derive advantage from your efforts. I have encountered a website post covid hair loss remedy that is performing exceptionally and I hope that you can also reap its benefits.

john said...

You're performing admirably, and I'm genuinely impressed by your recent work. I came across a post about cricket Latest updates on Asia Cup 2023 not too long ago, and it's clear they're excelling too.

Choicesgifts said...

You're doing a great job, mate! I'm really impressed with your work. I saw a site a few days ago and they are doing very well, thought I'd let you know. craftsman decor So that you too can benefit from it.

arabic said...

You're doing a great job, mate! I'm really impressed with your work. I have come across a website that provides information related to books Hayde Miller and books. I like their work and want you to benefit from it.