Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,701 questions
The X.509 certificate CN=accounts.accesscontrol.windows.net is not in the trusted people store
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 46%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERX%3C/text%3E%3C/svg%3E)
Ryan Xie
5
Reputation points
Hi there, I wants to integrate Entra ID Claims-based authentication with my Kentico application. However, I got error on the X.509 certificate and struggled so long with no solution. Can anyone instruct on how to resolve it? The following is the error I got:
The X.509 certificate CN=accounts.accesscontrol.windows.net is not in the trusted people store. The X.509 certificate CN=accounts.accesscontrol.windows.net chain building failed. The certificate that was used has a trust chain that cannot be verified. Replace the certificate or change the certificateValidationMode. A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
{count} vote
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 45%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
-
Akhilesh 9,515 Reputation points Microsoft Vendor
2024-10-05T13:13:59.2233333+00:00 Hi @Ryan Xie
Thank you for your post!
The error message you received indicates that the certificate chain cannot be verified, and the root certificate is not trusted by the trust provider.
Check if the certificate is issued by a trusted Certificate Authority (CA). If the certificate is not issued by a trusted CA, you can install the root certificate of the CA on your server.
Check if the certificate is added to the Trusted Root Certification Authorities store. You can use the Certificate Manager to verify if the certificate is added to the Trusted Root Certification Authorities store.
Sign in to comment
Sign in to answer