Return
-
Title
Connecting to Azure Tenant fails with error "Could not establish trust relationship for the SSL/TLS secure channel." -
Description
When attempting to configure an Azure Tenant in the Active Roles Web Interface, the following error message is encountered:
An error occurred during this operation. For details, see the error description below.
One or more errors occurred. An error occurred while sending the request. The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. The remote certificate is invalid according to the validation procedure.
-
Cause
The organization signin page configured in Azure has a custom certificate which is not trusted on the machine hosting Active Roles. -
Resolution
To identify the missing certificate:
- Open PowerShell on the machine hosting Active Roles.
- Run the following cmdlet: $psversiontable
- If the PowerShell version is not version 5 or higher, install Windows Management Framework 5 then reboot the Active Roles host before continuing,
- In PowerShell, run the following cmdlet: Install-Module AzureRM
- Complete the prompts to successfully install this module.
- Run the following cmdlet: Login-AzureRmAccount
- After entering the email address of a User, a certificate prompt will appear. This certificate chain must be installed in the computer store of the machine hosting Active Roles in order to proceed with configuring an Azure Tenant.