Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,071 questions
Azure Application Proxy - Certificate not trusted
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 98%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
jdhemic
1
Reputation point
I am trying to configure an application proxy for an NDES server that will be used with intune to issue certificates. But when I connect through the external FQDN, i see the following error on the server.
The SSL server certificate presented to Microsoft AAD Application Proxy Connector by the backend server is not valid; the certificate is not trusted.
Does anyone have any idea?
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 44%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Saurabh Sharma 23,816 Reputation points Microsoft Employee2020-08-07T23:25:28.83+00:00 @jdhemic From the error it looks like the trust between the application server and WAP server is somehow broken. You can find the error information in troubleshooting document as well. Can you please -
- Ensure the certificates are the same on both sides of the trust
- Check the TLS Ciphers are matching between both the WAP and Application Servers. Refer to Documentation
Also, try to collect a netsh trace of Web Application Proxy for any additional error information?
netsh trace start capture=yes tracefile=c:\trace.etl
netsh trace stop
-
Saurabh Sharma 23,816 Reputation points Microsoft Employee
2020-08-11T23:49:36.18+00:00 @jdhemic Please let me know if you are still facing this issue.
Sign in to comment
Sign in to answer