Custom SSL for the Dynamics 365 Domain

(0) Share

Report

Posted on by CU27101311-1

Custom SSL for the Dynamics 365 Domain

In our recent Security Audit, we found that the SSL certificate for the domain crm4.dynamics.com is insecure due to two weak ciphers. We need to resolve this, but since this is a Microsoft System service, we haven't found a solution to change the certificate or use any other security service to reroute users around this "insecure" path.

Does anyone have an idea how to work around this, or information on why this finding might be a false positive?

Thank you!

Categories:

Dynamics 365 general

I have the same question (0)

All responses (1)

Answers (0)

Suggested answer

PerezAguiar Microsoft Employee on at

Like (0)

Report

Custom SSL for the Dynamics 365 Domain

hey!

First, on Microsoft Trust Center (https://www.microsoft.com/en-us/trust-center/product-overview?msockid=24be85628755639a339a96bc862c62d3#Microsoft-Dynamics-365) you have some details about the certifications (ISO, SOC, etc) that Microsoft's cloud is compliant with.

Second, on Service Trust Portal Home Page you have some Penetration Test and Security assestments done by Third Parties and made public by Microsoft, where some of these issues are identified and Microsoft is aware and working to resolve. Please check the documentation on this link and confirm your topic is reported.

Finally, if your topic is NOT reported, you can raise a ticket with Microsoft Support indicating it's a cipher on the Certificate, or you can also report it on Azure portal.

Regards,

Was this reply helpful? Yes No