web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / Relying Party Certific...
Microsoft Dynamics CRM (Archived)

Relying Party Certificate was not found. Relying party is out of date.

(0) ShareShare
ReportReport
Posted on by PROCOMER - TI 110

Yesterday, we updated the SSL certificate in our ADFS CRM server (both applications in the samen server).  All worked fine till today, when the older certificate expired.  We began to have problems with the access and the errors we have are "Relying party certificate was not found".  In the ADFS MMC, the relying party shows the error "Relying party is out of date due to monitoring errors.  Please check the event log for details".  We check everything we found, update the certificate, but the problem is still in our crm.  Please help  us about that.  We tested almost everything we found in the web.  Thanks in advance.

*This post is locked for comments

I have the same question (0)
  • Suggested answer
    Muhammad Adeel Javaid Profile Picture
    Muhammad Adeel Javaid 5,580 on at

    Run the following in the MSCRM_CONFIG DB:

    ALTER TABLE Certificates ALTER COLUMN Name NVARCHAR(256);

     UPDATE

      MSCRM_CONFIG.dbo.ConfigurationMetadata

     SET

      ConfigurationMetadataXml =

        REPLACE(

         CAST(ConfigurationMetadataXml AS NVARCHAR(MAX)),

         '<Description>Name of the Certificate</Description><Type>nvarchar</Type><Length>128</Length>',

         '<Description>Name of the Certificate</Description><Type>nvarchar</Type><Length>256</Length>'

        );

    The reason is that there is 128 character limit on Certificate Names for Claims configuration and thats why authentication does not work if the limit exceeds.

  • Suggested answer
    Muhammad Adeel Javaid Profile Picture
    Muhammad Adeel Javaid 5,580 on at

    I am also refering you to the link given below for further troubleshooting if the issue does not resolve by abovementioned way:

    social.microsoft.com/.../d4d1eb1a-266b-4194-907f-488bb1fee6f2

  • PROCOMER - TI Profile Picture
    PROCOMER - TI 110 on at

    Thanks everybody for your kindly answers.   We checked this page:  

    blogs.msdn.com/.../instructions-for-updating-the-ssl-certificate-used-by-crm-2011-claims-based-and-or-ifd-environments.aspx

    And the point that we missed (and only in this page we saw it) it's the number 3: Reconfigure Claims Based Authentication in Deployment Manager on the CRM Server to use the new certificate.

    When we checked this item, all worked fine and the peace returned to us!!

    Just one point: in the Relying Party Trust, still remains the message:  "This relying party is out of date due to monitoring errors.  Please check the event log for details", but there's no errors in the event viewer.   Any idea?

    Thanks again for all!

  • Suggested answer
    Muhammad Adeel Javaid Profile Picture
    Muhammad Adeel Javaid 5,580 on at

    Can you reconfigure ADFS 2.0 and try to add the relying parties again.

    You dont need to add port 80 and 81 for Default Web Site(ADFS). Just add https(444) for ADFS and https(443) for CRM. Make sure to add certificate for both of the bindings.

    You can use FsConfigWizard.exe for re configuring ADFS from this location C:\Program Files\Active Directory Federation Services 2.0.

  • Suggested answer
    Muhammad Adeel Javaid Profile Picture
    Muhammad Adeel Javaid 5,580 on at

    This link could also be of help for you:

    blogs.msdn.com/.../using-federation-metadata-to-establish-a-relying-party-trust-in-ad-fs-2-0.aspx

  • Mohammad Atif Profile Picture
    Mohammad Atif on at

    Renew certificate on the ADFS server for the secure binding in IIS, update claims based authentication information, and update federationMetadata for the relying party trust.

    Thanks,

    Mohamamd

  • Verified answer
    PROCOMER - TI Profile Picture
    PROCOMER - TI 110 on at

    Well, all seems matter of time that the error message ""This relying party is out of date due to monitoring errors.  Please check the event log for details" dissapears.   All is working fine now.   Thanks for all your help!!!

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
SA-08121319-0 Profile Picture

SA-08121319-0 4

#1
Calum MacFarlane Profile Picture

Calum MacFarlane 4

#3
Alex Fun Wei Jie Profile Picture

Alex Fun Wei Jie 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans