?
Solved

Unable to connect to Microsoft Federation Gateway

Posted on 2014-01-28
4
Medium Priority
?
1,594 Views
Last Modified: 2014-03-23
Hello,

I'm having an issue connecting to the Microsoft Federation Gateway using Exchange 2010 SP3 RU4. The Federation has existed for months without issue and recently lost connection. Autodiscover is working as normal and all certificates are up to date (Federation Certificate is Self-Signed as per Microsoft Recommendation). Running Test-FederationTrust -verbose returns this error.

Test-FederationTrust : Failed to retrieve Federation Metadata from the Microsoft Federation Gateway. This operation will be retried in a few seconds. Last error: System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSl/TLS secure channel. System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure

I have tried removing the Federation but the same error occurs on that CMDLET as well.

Any help is appreciated.
0
Comment
Question by:michd
  • 3
4 Comments
 
LVL 9

Expert Comment

by:nick2253
ID: 39815711
Somehow there's a problem is authenticating the connection.

Double check that your connection settings between the services are set to both use (or not use) encryption, etc.
0
 

Author Comment

by:michd
ID: 39815767
According to Microsoft Technet the connection should be going outbound over 443 and coming back in using Autodiscover service. I have tested the Autodiscover service using https://testconnectivity.microsoft.com/ and verified that traffic over 443 is allowed out from the Exchange servers and all appears well traffic wise.

Any other ideas?
0
 

Accepted Solution

by:
michd earned 0 total points
ID: 39938051
Ended up speaking with Microsoft Support on the issue. The root cause was that both local Exchange servers did not trust the SSL cert on the Microsoft Federation Gateway. Solution was to export the cert and import it onto each server
0
 

Author Closing Comment

by:michd
ID: 39948373
The issue was resolved through Microsoft support and my comment provides the solution.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

What is Archiving? Archiving in Exchange Online (called In-Place Archiving) provides users with additional mailbox storage space.
You can use the network upload option and the Office 365 Import service to bulk-import PST files to user mailboxes. Network upload means that you upload the PST files a temporary storage area in the Microsoft cloud.
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…

585 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question