This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 27%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIM%3C/text%3E%3C/svg%3E)
Hi,
we have 03 server workflow manager farm, we are getting following error
https://servername.mydomain.com:12290/ is not responding: The underlying connection was closed:
Could not establish trust relationship for the SSL/TLS secure channel.
plz guide what is the issue and how to fix it, i am using FQDN URL for workflow manager. SSL certificate expiry till next year.
pls guide
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 78%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EU%3C/text%3E%3C/svg%3E)
There can be several reasons for this error message . Certificate or TLS registry keys are mot common ones.
If you are using custom certificate make sure its valid.
If you are using SP 2016 . or 2019, make sure you have the following registry keys as mentioned here : https://thesharepointfarm.com/2016/04/tls-1-2-support-workflow-manager-office-online-server/
If its SharePoint 2013 and you are using WFM TLS1.2 version you still need those keys for 2013 as well.
You can use the script below to ad those keys.
$registryPath = "HKLM:\SOFTWARE\Microsoft.NETFramework\v4.0.30319"
$Name = "SchUseStrongCrypto"
$value = "1"
New-ItemProperty -Path $registryPath -Name $name -Value $value -PropertyType DWORD -Force | Out-Null
$registryPath = "HKLM:\SOFTWARE\Wow6432Node\Microsoft.NETFramework\v4.0.30319"
$Name = "SchUseStrongCrypto"
$value = "1"
New-ItemProperty -Path $registryPath -Name $name -Value $value -PropertyType DWORD -Force | Out-Null
Hello @Irfan Mughal ,
It is true it is about the certificate but it is not the end certificate. This is because a certificate chain is broken in the Intermediate level.
Please follow the steps:
1.Open the certificate in the browser
2.Navigate to Certification Path
3.Double click on the certificate
4.Go to the Details tab and click of Copy to file ..
5.Here you can export the certificate to .cer format and save it any convenient location.
6.Open the MMC console
7.Add certificate using: File >> Add/Remove Snap-In
8.Here you will prompt to select the location, where you can select Certificates >> Computer Account >> Local Computer
9.Import your saved certificate to ROOT or Intermediate as you want
Thanks,
Echo Du
==================================
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hi,
Thx for details, plz also guide from which server we have to access / browse certificate workflow manager server or SharePoint server. secondly to import server on which server we have to import certificate.
we have 03 workflow servers and 02 app and 02 web.
Thx
means i have to export and import certificate on all three workflow manger servers, right.
Hi @Irfan Mughal ,
Would you tell me whether your issue has been resolved or have any update?
I am looking forward to your reply.
Have a nice day!
Thanks,
Echo Du
If you find echo's answer is helpful to you, please remember to accept it as answer.
It will help others who meet the similar question in this forum.
Thank you for your understanding and support.