Dynamics Community Forum Thread Details

Certificate Validation on Service Tier results in error: The X.509 certificate CN=accounts.accesscontrol.windows.net is not in the trusted people store

Hello,

Reason for this issue is that Azure Design team changed their certification methodology to user name validation. So if you are running Dynamics NAV 2018 with Office 365 SSO authentication, then you will receive an error in the event log file and logon won't work. The workaround is to disable Certificate Validation on service tier machine which will allow authentication to occur again. Not ideal solution. With CU3, we added a key called:

DisableTokenSigningCertificateValidation"

You will however notice that with CU3, the issue is still not resolved even if you add the following key manually in the customsettings.config file and set it to true:

<add key="DisableTokenSigningCertificateValidation" value="True" />

This is because a last minute change was added that did not make it into CU3. That said, CU4 has the full change in behavior. To workaround the issue / resolve this issue and allow the key to work, apply CU4 and adjust following keys in CustomSettings.config file:

Thank you.

Quick Links