Upgraded 2 servers from fully patched Exchange 2019 to Exchange SE. ECP and OWA have HMA authentication configured. After the update, both servers have broken ECP and unhealthy ECP.Proxy and MRS.Proxy healthchecks. In logs - 401 Unauthorized. The same was on the previous CU for Ex2019.
I recreated the ECP virtual directory to fix (probably switching to forms and then back to HMA will fix this issue too). But it is frustrating...
What I did to fix my servers:
Get-EcpVirtualDirectory -Server XXX | Remove-EcpVirtualDirectory
New-EcpVirtualDirectory -Server XXX -InternalUrl "https://XXX/ecp" -ExternalUrl "https://XXX/ecp"
Get-OwaVirtualDirectory -Server XXX | Set-OwaVirtualDirectory -AdfsAuthentication $false -BasicAuthentication $false -FormsAuthentication $false -DigestAuthentication $false
Get-EcpVirtualDirectory -Server XXX | Set-EcpVirtualDirectory -AdfsAuthentication $false -BasicAuthentication $false -FormsAuthentication $false -DigestAuthentication $false
Get-EcpVirtualDirectory -Server XXX | Set-EcpVirtualDirectory -OAuthAuthentication $true
Get-OwaVirtualDirectory -Server XXX | Set-OwaVirtualDirectory -OAuthAuthentication $true
iisreset
Get-HealthReport XXX