web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Customer experience | Sales, Customer Insights,... / SSL Certificate update...
Customer experience | Sales, Customer Insights,...
Answered

SSL Certificate update Queue Mailboxes stops receiving emails.

(0) ShareShare
ReportReport
Posted on by AnithaV 10

HI ,

We are using CRM 2016 and Exchange online for mail flow. Since the hybrid configuration, this is the first time we are renewing the SSL certificate. 

Once SSL certificate is renewed Emails are not received in Email Queue.  

We are Exchange Online Hybrid Profile for email sync. 

Below is the error message received. 

ActivityId: 4795bbcb-fce8-4629-a23c-20f01c3e4656 >Error : Microsoft.Exchange.WebServices.Data.ServiceRequestException: The request failed. The request was aborted: The request was canceled. ---> System.Net.WebException: The request was aborted: The request was canceled. ---> Microsoft.Crm.CrmException: Access token could not be obtained from: accounts.accesscontrol.windows.net/.../2 for resource: 00000002-0000-0ff1-ce00-000000000000/outlook.office365.com@ced71ed6-76dd-43d0-9acc-cf122b3bc423 ---> Microsoft.Crm.CrmException: Certificate: CN=*.mainroads.wa.gov.au, O=Main Roads Western Australia, L=East Perth, S=Western Australia, C=AU with FindType: FindBySubjectDistinguishedName was not found in Store: My at StoreLocation: LocalMachine.    at Microsoft.Crm.Authentication.Claims.CertificateUtility.RetrieveCertificate(CertificateData certificateData)    at Microsoft.Crm.Authentication.S2S.CrmClientServicePrincipal.GetSigningCredentials()    at Microsoft.Crm.Authentication.S2S.Authorization...

Could any one please let us know if there are any resolution for it, 

I have the same question (0)
  • Suggested answer
    lkoplin Profile Picture
    lkoplin on at

    Hello AnithaV,

    There are a few things that would need to be checked.

    • Did you use the same certificate during the Hybrid configuration?  Is this an expired certificate?
    • Typically when we see this type of an error after an expired certificate was updated, we would recommend going through the setup process again to make sure that everything is updated:
    • If you have already been through this setup again with the new certificate, then check the following:
      • Log into your servers that are running the Async Services.
      • Make sure that after you complete the steps in the documentation above, you check the permissions on the Certificates. 
        • Start > MMC > enter > ctrl + M > certificates > computer > Local computer > finish
        • Expand Certificates (local computer) > personal > select certificates
        • Right click the CRM certificate that was used in the PowerShell commands > all tasks > manage private keys
        • Add the CRM application pool & Async account with read permissions if they are not present:
          • pastedimage1608061956674v1.png
      • On the Async Servers, confirm that the service account running the CRM App Pool and the service account running the Async Services have read permissions to the following directory:
        • %ALLUSERSPROFILE%\Microsoft\Crypto\RSA\MachineKeys
          • Service Accounts need Read Permissions to the Folder and Sub-Folders.  Note, there may be some errors that indicate they cannot have read permissions to some sub-folders which is okay.

    These steps need to be completed on all servers where you are running your Async Services.  I would start with the steps above, which typically resolve the error message that you are experiencing.

     

    Thanks,


    Lance Koplin
    Microsoft Dynamics 365 Support

  • AnithaV Profile Picture
    AnithaV 10 on at

    Hi Lance,

    Thank you the reply.

    We resolved the issue , following the steps mentioned in the link -

    Connect Dynamics 365 Customer Engagement (on-premises) to Exchange Online | Microsoft Docs

    Thanks, 

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Customer experience | Sales, Customer Insights, CRM

#1
Tom_Gioielli Profile Picture

Tom_Gioielli 108 Super User 2025 Season 2

#2
Jimmy Passeti Profile Picture

Jimmy Passeti 50 Most Valuable Professional

#3
Gerardo Rentería García Profile Picture

Gerardo Rentería Ga... 49 Most Valuable Professional

Last 30 days Overall leaderboard

Featured topics

Hide selecting Contact for potential customer when creating quote

Product updates

Dynamics 365 release plans