Expired certificates in Onebox virtual machine

(2) Share

Report

Posted on by FV@E

133

Good afternoon,

Today on my local D365 F&O virtual machine (onebox) I encountered the issue that all certificates for Dynamics had been expired. I've found some online guides on how to renew those certificates and get Dynamics up and running again. This has worked well since F&O can be accessed again. However, I do encounter one small problem. Even after all certificates have been renewed, I still cannot generate SSRS reports from Dynamics. For example, when trying to generate a pro forma sales order confirmation and print the report I get the message "The remote certificate is invalid according to the validation procedure" (See screenshot below). So I guess I've either missed renewing a specific certificate, or after renewing the certificates I need to perform some other action. Anyone here who can guide me in the right direction?

Categories:

Dynamics 365 Finance

I have the same question (0)

All responses (2)

Answers (1)

FV@E 133 on at

Like (1)

Report

Ok, after some debugging I have progressed from the error message above to another error message.

What I did: I have added all newly generated certificates to the list of trusted root certificates inside the VM. Then after restarting the VM, the error from my first post has gone. Now I do get another error though: "At least one security token in the message could not be validated". I have found some post referring to the audienceUris in the wif.config file. However, those settings have not changed when I created new certificates. So anyone have an idea what I should do to get rid of this error?

Was this reply helpful? Yes No
Verified answer

FV@E 133 on at

Like (1)

Report

For future readers: I've managed to resolve this issue.

Apparently somewhere in the process of generating reports one of the old expired certificates is still being used. But since I changed all references to the certificates in the web.config and wif.config this old certificate was not accepted anymore.

So to solve this, I had to readd the certificate thumbprint for the usnconeboxax1aos.cloud.onebox.dynamics.com certificate to the wif.config and to the web.config InternalServiceCertificateThumbprints key. Then I could generate SSRS reports again.

Was this reply helpful? Yes No

Join the conversation

Community site session details

Expired certificates in Onebox virtual machine

Helpful resources

Quick Links

Responsible AI policies

Neeraj Kumar – Community Spotlight

Congratulations to the November Top 10 Community Leaders!

Leaderboard > Finance | Project Operations, Human Resources, AX, GP, SL

Featured topics

Product updates

Community site session details

Expired certificates in Onebox virtual machine

Helpful resources

Quick Links

Responsible AI policies

Neeraj Kumar – Community Spotlight

Congratulations to the November Top 10 Community Leaders!

Subscribe to this forum!

Select categories

Leaderboard > Finance | Project Operations, Human Resources, AX, GP, SL

Featured topics

Product updates