Views:

Applies to Product - Dynamics 365 Finance


What’s happening?
Customers are unable to import or export data entities on their environment, receiving an error message stating "Query validation failed - The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel."
 

Reason:
This is related to SSL certificate validation, specifically when the SSL certificate is expired or not properly configured, leading to trust relationship failures in the SSL/TLS secure channel.
 

Resolution:

  1. Check SSL Certificate: Confirm that the SSL certificate is not expired. If it is expired, proceed to renew it.
  2. Rotate SSL Certificate:
  3. Navigate to Lifecycle Services (LCS).
  4. In the Shared Asset library, download the "Renew WinRM certificate" folder.
  5. RDP to the environment and extract the zip file to a local folder.
  6. Open mmc.exe and add the Certificate snap-in (Computer).
  7. Open Personal\Certificates and locate the expired certificate.
  8. Open Windows PowerShell with elevated privileges and run .\Virtual-<VMName>-RegenerateWinRMCertificate.ps1 from the extracted folder.
  9. Refresh the Certificates console to confirm the new certificate.
  10. Restart Environment: Restart the environment from LCS and rotate the SSL certificate into the environment.
  11. Network Security Groups: Compare the network security groups of the affected environment with one that is not affected. Ensure that all necessary rules are in place.
  12. Monitor After Restart: After restarting the environment, monitor for any recurrence of the issue, as it may be related to firewall rules or roles that activate post-restart.
If the issue persists after following these steps, further investigation may be required, including capturing logs from the event viewer to identify any underlying issues.