This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 26%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESG%3C/text%3E%3C/svg%3E)
We have configured office online server with SharePoint 2016 environment.
When users are trying to open any PDF or any other office files (word, excel or power point) sometimes the file fails to open and user gets below error message. This issue is not consistent and is happening intermittently.
ULS logs shows below error corresponding to the ID mentioned in the error message:
Unexpected SPApplicationAuthenticationModule: Incoming token does not contain an actor.
Unexpected SPSecurityTokenServiceManager!EnsureSharePointLogonRequestClaims: InputIdentity doesn't conatin a PrimarySid claim.
Also what is the latest CU for SharePoint Server 2016 ?
Reproduce the error while monitoring the ULS logs on OOS. They're located at C:\ProgramData\Microsoft\OfficeWebApps\Data\Logs\ULS. You can look up the session ID or use ulsviewer (same app you'd use to monitor SharePoint ULS logs) to watch the logs while you repro the problem.
I suggest to check if you are using system account or not , please using a normal user account to access and monitor the ULS log .
In SharePoint Server 2016, make sure you aren't logged on as System Account because you won't be able to edit or view the documents with Office Online.
In addition:
1.You should add the SharePoint servers self-signed certificate in WAC server Trusted Certificate store(Local Computer).
2.You should add the WAC server certificate in the all SharePoint server Trusted Certificate store(Local Computer).
Another question, the latest CU for SharePoint Server 2016 is KB 4484473.
You can always find the latest SharePoint updates in the links below:
If the response is helpful, please click "Accept Answer" and upvote it.
We already tried the steps mentioned above and updated the OOS CU to August 2020 also.Still the same error.
All the certificates are valid, it’s just enterprise Chromium which complains that certificate is not valid and on IE there is no certificate error.
Do we need to have Wildcard certificate for Both SharePoint and Office Online Server ?
Wildcard certificate supports use in SharePoint and Office Online Server. But they are not necessary.
Sometimes I also encounter this situation. In most cases, these files can be opened normally after a while.
In addition, you can create a new library and upload this file to the new library, open this file and check if the issue exits.
I am still researching this issue, I will update it here if there is new progress