Hi Team,
I have face issue wildcard certificate validation fail between Web Server and Nav Server. We have use wildcard certificate for nav and web. The problem is web client has below issue when certificate validation during login.
Error accessing Website Microsoft Dynamics NAV 2016 Web Client
URL: nav.cronus.com.sg/.../SignIn.aspx
Type: Microsoft.Dynamics.Nav.Types.NavSecurityNegotiationException
Message: The Service Principal Name (Delegation) configuration has been set incorrectly. Server connect URL: "net.tcp://navapp.cronus.com.sg:7046/NAV90-AU/Service". SPN Identity: "DynamicsNAV/navapp.cronus.com.sg:7046"
The X.509 certificate CN=*.cronus.COM.SG, O=Cronus Pte Ltd, L=Singapore, C=SG is not in the trusted people store. The X.509 certificate CN=*.cronus.COM.SG, O=Cronus Pte Ltd, L=Singapore, C=SG chain building failed. The certificate that was used has a trust chain that cannot be verified. Replace the certificate or change the certificateValidationMode. The revocation function was unable to check revocation because the revocation server was offline.
1.Certificated is added on both server.
Computer Account\Personal\Certificate and Trusted Root Certificate\Certificate
2.DnsIdentity is added WebConfig
<add key="DnsIdentity" value="cronus.com.sg"/>
3.RTC can open from Web Server.
4.Use NavUserPassword
5.NAV2016 CU16 - AU
6.Web Server without join domain. Only App and Data join domain.
I would like to heard your suggestion on my issue.
Regards,
Yukon
*This post is locked for comments