Microsoft (Minecraft) auth endpoints dont work on LAN

Question

This suddenly started happening around a month ago (specifically in minecraft) and im starting to suspect it has something to do with my internet provider (Tho nobody else i know with the same internet provider seems to have the same issue), but im still hoping someone here has the answer.

The issue happens on all PCs connected to my network via LAN specifically, wifi works just fine. So far I have tried:

Reinstalling everything
Deleting microsoft store and xbox account cache
Flushing/Switching my dns
Disabling ipv6
Using a proxy and multiple tun VPNs
Switching devices (as mentioned before)
Third party launchers
Repairing the installation thru Xbox
Disabling the firewall on my router
Completely resetting settings my router
Changing the default DNS on my router
And a few more things

Im genuinely out of ideas at this point and would be extremly grateful for any help, thanks in advance.

(To clarify im getting the fairly common "Failed to Verify What Products You Own" error, but as stated before, absolutely none of the fixes i found on the internet and/or thought of worked)

Answer 1

Dear Stanly Trigger,

Thank you for reaching out to the Microsoft Q&A Forum.

You have done an incredible job of eliminating almost every common cause.

You could try following these steps below to solve this issue:

1. Confirm the Endpoint block:
   • Press Windows + X, select Terminal (Admin) or Windows PowerShell (Admin).
   • Run these commands one by one:

          Test-NetConnection api.minecraftservices.com -Port 443 
          Test-NetConnection xsts.auth.xboxlive.com -Port 443 
          Test-NetConnection login.microsoftonline.com -Port 443
     

   • You will likely see TcpTestSucceeded: False for one or all of these.
   • Now, connect the same PC to Wi-Fi and run them again. You will likely see TcpTestSucceeded: True. This confirms the block is isolated to the LAN.
2. Isolate the router:
   • Disconnect the Ethernet cable that runs from your modem to your router.
   • Plug that Ethernet cable directly into your PC's LAN port.
   • Restart your modem (unplug its power for 30 seconds).
   • Restart your PC.
   • Once your PC has an internet connection, try to launch Minecraft and authenticate.
   Note: If Minecraft works, proceed to step 3. If Minecraft still fails, you may need to contact your ISP and explain that they are blocking Microsoft auth service over Ethernet.
3. Fix the router:
   • Log in to your router's admin page. Check for and install any available firmware updates. This is critical as it fixes bugs that a factory reset will not.
   • After the firmware update, find the "Factory Reset" option in the router's settings and perform it. (Note: You will need to re-configure your Wi-Fi name and password).
   • After the reset, log back in. Before changing anything else, DISABLE the following features. These are the most likely cause of the problem, as they can misidentify auth packets as threats:
   • QoS
   • DPI
   • Any "Security Scans," "Malicious Site Blocking," or "AiProtection" (often from Trend Micro)
   • IPv6 (which you already tried, but ensure it's off on the router)
   • Find the MTU setting (usually under "WAN" or "Internet"). Set it manually to 1500 (or 1492 if your ISP uses PPPoE).
   • After all these changes, reboot the router and test Minecraft on LAN.
4. Force PC MTU:
   • Press Windows + X, select Terminal (Admin) or Windows PowerShell (Admin).
   • Type: netsh interface ipv4 show interfaces
   • Look at the list and find the name of your main Ethernet/LAN port.
   • Now, type the following command, replacing "Ethernet" with your exact interface name and using the mtu=1400 value from your plan:

          netsh interface ipv4 set subinterface "Ethernet" mtu=1400 store=persistent
     

   • Restart your computer then try again.

Please understand that our initial reply may not always immediately resolve the issue. However, with your help and more detailed information, we can work together to find a solution. Thank you for your cooperation.  

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".  

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi Stanly Trigger,

My sincere apologies for the delay in my response. Thank you for your patience.

I have now reviewed your query and am prepared to assist.

You could try some more steps as below:

1. Mobile hotspot test:
   • Enable mobile data hotspot on your phone.
   • Connect PC via WiFi/Ethernet to hotspot.
   • Launch Minecraft and attempt auth.
   • If succeeds: Home ISP/router confirmed. Proceed to VPN workaround/escalation.
   • If fails: Rare account/endpoint issue, skip to escalation.
2. Optimize VPN for full TLS bypass:
   • Since tunnel VPN achieves TCP but fails TLS, switch to a protocol-robust VPN.
   • Connect to a nearby server then test Minecraft auth.

If these steps could not help, at this stage, you should contact the Minecraft | Xbox Support directly. They have the tools to look at your account's authentication logs on the server side to see what the issue is.

Answer 3

Hi Stanly Trigger,

I haven't received the message from you yet. If there is anything more that I can do for you or if anything is unclear, please do not hesitate to let me know.

Sincerely,