Forum Discussion
Exchange Online PowerShell Updates to 3.10.1 to Fix CBA
Microsoft rushed out version 3.10.1 of the Exchange Online management PowerShell module to fix a problem with certificate-based authentication. It seems like a change in an internal Microsoft identity platform caused the tokens issued after a successful connection to Exchange Online to not authorize the execution of further cmdlets. To their credit, Microsoft fixed the issue, but is this the kind of thing that should be caught in testing?
https://office365itpros.com/2026/07/27/exchange-online-management-3-10-1/
1 Reply
This is a good reminder that a successful authentication does not necessarily mean a functional administrative session.
What makes this issue particularly concerning is that CBA is heavily used for unattended automation, Azure Automation runbooks, and other production workloads where failures may not be immediately visible.
Microsoft reacted quickly with 3.10.1, but authentication and tenant-resolution changes should probably be validated against common app-only scenarios before reaching production.
For Exchange administrators, this also reinforces an important practice: module upgrades should be treated like infrastructure changes — test first, deploy second.
