Folks,
I've recently renewed our organizations ADFS and Web Proxy SSL web certificate using a SAN certificate '*.domainname.com'. This procedure was used successfully in previous years with no issues or error messages. This year, the same procedure seemed to be successful. However, today on the day the previous certificate expired, we received the following error when logging into the Outlook desktop client:
---------------------------------
We do NOT get this message when logging into the Outlook WEB client or any other ADFS enabled authentication (VPN, etc.). I've verified that the procedure used was correct and also redone the procedure to be sure it was done correctly and completely. No improvement or fix was found. The following certs were renewed using the new SAN SSL Certificate:
- ADFS SSL Certificate (New SAN SSL Cert)
- Service-Communication Certificate (New SAN SSL Cert)
- Web Application Proxy SSL Certificate (New SAN SSL Cert)
Unchanged Certificates:
- Token Decrypting (adfs.domainname.com)
- Token Signing (adfs.domainname.com)
One difference between last year's renewal and this year's renewal is that we implemented Multi-Factor Authentication during this past year. We use the DUO MFA service and this is incorporated into our Domain login, O365 login, VPN and other services. I am unable to find any articles or support pages on any possible way the DUO MFA service could be causing this error but I also can't find any other possible reason why this error message is occurring.
I'm looking for a root cause and potential fix for this issue. If anyone has any ideas or can point me in the right direction to determine the reason for this error and how to resolve it, I would be grateful.
Thanks.