outbound tls authentication failed for auth level domainvalidation with error revocationoffline

Tanapong Jangjeanhut 6 Reputation points
2021-11-23T03:15:58.14+00:00

I have deployed Exchange 2016 Full Hybrid with Office 365.

Error:

Event id : 2022

Source : MSExchangeTransport

Outbound TLS authentication failed with error RevocationOffline for Send connector Outbound to Office 365. The TLS authentication mechanism is DomainValidation. Target is xxx.mai.onmicrosoft.com.

Please advise me . Thank you.

Exchange | Hybrid management
Exchange | Hybrid management
The administration of a hybrid deployment that connects on-premises Exchange Server with Exchange Online, enabling seamless integration and centralized control.
{count} vote

1 answer

Sort by: Most helpful
  1. Andy David - MVP 159.7K Reputation points MVP Volunteer Moderator
    2021-11-23T12:30:48.47+00:00

    Your certificate on the on-prem send connector isnt set right or it cant be checked by Exchange Online or you have network issues on-prem

    The easiest solution is to probably re-run the Hybrid Wizard and make sure a valid, third part certificate is chosen for the send connector between on-prem and hybrid,

    If you do it manually, be sure to use a the correct, 3rd party cert:

     $cert = Get-ExchangeCertificate -Thumbprint <Thumbprint>
     $tlscertificatename = "<i>$($cert.Issuer)<s>$($cert.Subject)"
     Set-ReceiveConnector "EX2016SRV1\HybridRecConnector" -TlsCertificateName $tlscertificatename
     Set-SendConnector -Identity “Send Connector Name” -TLSCertificateName $tlscertificatename
    

    If this has already been done, here are some other possibilities:
    https://answers.microsoft.com/en-us/msoffice/forum/all/revocationoffline-error-in-one-of-the-hub-servers/a6256f84-f771-4f3b-a38f-c1d9336b5372

    https://itblog.ldlnet.net/index.php/2019/02/05/event-11022-with-msexchangetransport-easy-validation-test/


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.