exchange 2016 ecp HMACprovider.GetCertificates:ProtectionCertificates.Length<1

老马 负轭 21 Reputation points
2022-11-18T15:39:40.133+00:00

261869-exch2016-error.jpg

as above error, however, i have already checked the certificate and it is normal, i also had done the same steps as suggestion by microsoft,
New-ExchangeCertificate -KeySize 2048 -PrivateKeyExportable $true -SubjectName "cn=Microsoft Exchange Server Auth Certificate" -FriendlyName "Microsoft Exchange Server Auth Certificate" -DomainName @()

Set-AuthConfig -NewCertificateThumbprint <新的证书ID> -NewCertificateEffectiveDate (Get-Date)
Set-AuthConfig -PublishCertificate
Set-AuthConfig -ClearPreviousCertificate
————————————————
but when i accessed the ecp, the same error shown:

HMACprovider.GetCertificates:ProtectionCertificates.Length<1

how can i resolve the issue?

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,492 questions
0 comments No comments
{count} votes

4 answers

Sort by: Most helpful
  1. Jonathon Kindred 406 Reputation points
    2022-11-18T15:45:58.933+00:00

    Use this to create a new certificate:

    https://learn.microsoft.com/en-us/exchange/troubleshoot/administration/cannot-access-owa-or-ecp-if-oauth-expired

    Make sure you restart the WebAppPools mentioned in the documentation. It should take effect immediately but can take up to an hour to take effect.


  2. Christian Carrasco 1 Reputation point
    2022-11-18T15:59:49.927+00:00

    Are you sure the new certificate thumbprint is assigned to ECP and OWA virtual directories?

    If so, you can try an IISreset, to restart all the web services, this error web page comes after you put the credentials for login to ECP?

    Regards.


  3. LilyLi2-MSFT 1,981 Reputation points
    2022-11-21T04:23:30.39+00:00

    Hi @老马 负轭 ,

    Welcome to our forum.

    Is ECP working now?

    “While actually i had done it yesterday in accordance with Microsoft, but i didn't work. this morning i open the ecp again and find it working.”
    After creating and deploy a new OAuth certificate to the Exchange server, you need to wait for a few hours for the ECP to work. It should take effect immediately if you restart IIS or recycle the Outlook on the web and EAC application pools.


    If an Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


  4. 老马 负轭 21 Reputation points
    2022-11-29T11:00:58.377+00:00

    many thanks LilyLi2, the ECP is working. however, i have restarted the IIS and even restarted the server, but actually it took a night to effect as i can access the ECP the second morning.