Exchange 2010 Hybrid Migration to Office 365.

%3CLINGO-SUB%20id%3D%22lingo-sub-1520898%22%20slang%3D%22en-US%22%3EExchange%202010%20Hybrid%20Migration%20to%20Office%20365.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1520898%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Guys!%3C%2FP%3E%3CP%3EI%20seem%20to%20have%20a%20big%20problem%20with%20migrating%20on%20premise%20Exchange%202010%20mail%20accounts%20over%20to%20Office%20365%20tenant.%20I%20have%20logged%20this%20with%20Microsoft%20multiple%20times%2C%20and%20not%20really%20getting%20anywhere%20-%20I%20keep%20been%20sent%20back%20and%20forwards%20between%20the%20On%20prem%20and%20O365%20team...%20I%20will%20provide%20all%20steps%20taken%20and%20config%20below%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EServer%20Config%3A%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3EWindows%20SBS%202008%20R2%2C%20SP1%3C%2FP%3E%3CP%3EExchange%202010%3C%2FP%3E%3CP%3E%3CSTRONG%3ESteps%20done%3A%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3EVerified%20the%20Office%20365%20txt%20record%20for%20the%20domain.%3C%2FP%3E%3CP%3EConfigured%20AD%20sync%2C%20so%20mailboxes%20are%20appearing%20in%20the%20365%20portal.%3C%2FP%3E%3CP%3E%3CSTRONG%3EIssue%20at%20hand%3A%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3EWhen%20trying%20to%20run%20the%20Office%20Hybrid%20Migration%20Wizard%2C%20it%20errors%20at%20the%20end%20every%20time.%20I%20fill%20in%20all%20the%20correct%20details%2C%20step%20by%20step%20and%20get%20the%20following%3A%3C%2FP%3E%3CP%3E-The%20connection%20to%20the%20server%20%22x%22%20could%20not%20be%20completed.%20EWS%2FMrsproxy.svc%20failed.%3C%2FP%3E%3CP%3E-Error%20details%20could%20not%20establish%20trust%20relationship%20for%20the%20SSL%2FTLS%20secure%20channel.%3C%2FP%3E%3CP%3E%3CSTRONG%3ESteps%20advised%20and%20taken%20to%20try%20resolve%3A%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E-Server%20Reboot%26nbsp%3B%3C%2FP%3E%3CP%3E-Try%20create%20endpoint%20in%20Office%20365%20portal%20manually%20*Fails%3C%2FP%3E%3CP%3E-Enabled%20MRS%20proxy%20through%20power%20shell%26nbsp%3B%3C%2FP%3E%3CP%3E-Restarted%20IIS%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EAdditional%20Info%3A%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E-A%20PST%20restore%20is%20just%20not%20feasible%2C%20there%20is%20around%2020%20mailboxes%20all%2030-40GB%3C%2FP%3E%3CP%3E-Can%20browse%20to%20EWS%2FOWA%20Pages%20externally%3C%2FP%3E%3CP%3E-Server%20has%20self%20signed%20certificates%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20help%20with%20this%20would%20be%20greatly%20appreciated.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EC%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1520898%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMigration%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1520954%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%202010%20Hybrid%20Migration%20to%20Office%20365.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1520954%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F728090%22%20target%3D%22_blank%22%3E%40chuns2000%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20will%20need%20a%20valid%20Public%20certificate%20to%20implement%20hybrid.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EPlease%20read%20more%20here%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Fhybrid-deployment-prerequisites%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Fhybrid-deployment-prerequisites%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBest%20Regards%2C%3CBR%20%2F%3ENuno%20%C3%81rias%20Silva%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1521055%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%202010%20Hybrid%20Migration%20to%20Office%20365.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1521055%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F728090%22%20target%3D%22_blank%22%3E%40chuns2000%3C%2FA%3E%2C%20if%20you%20are%20using%20a%20public%20certificate%2C%20the%20problem%20probably%20could%20be%20a%20firewall%20SSL%20inspection%20or%20a%20proxy.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20Regards%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHave%20a%20nice%20day%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1521245%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%202010%20Hybrid%20Migration%20to%20Office%20365.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1521245%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F50%22%20target%3D%22_blank%22%3E%40Nuno%20Silva%3C%2FA%3E%26nbsp%3BThanks%2C%20I%20will%20import%20a%20public%20cert%20and%20go%20from%20there.%20I%20will%20let%20you%20know%20if%20it%20works.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1828902%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%202010%20Hybrid%20Migration%20to%20Office%20365.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1828902%22%20slang%3D%22en-US%22%3E%3CP%3ESign%20in%20to%20Microsoft%20365%20or%20Office%20365%20with%20your%20work%20or%20school%20account.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EChoose%20Setup%20%26gt%3B%20Domains.%3C%2FP%3E%3CP%3EOn%20the%20Domains-%20page%2C%20click%20Add%20domain%20to%20start%20the%20domain%20wizard.%3C%2FP%3E%3CP%3EChoose%20Add%20domain%3C%2FP%3E%3CP%3EOn%20the%20Add%20a%20domain%20page%2C%20type%20in%20the%20domain%20name%20(for%20example%2C%20Contoso.com)%20you%20use%20for%20your%20on-premises%20Exchange%20organization%20and%20then%20choose%20Next.%3C%2FP%3E%3CP%3EOn%20the%20Verify%20domain%20page%2C%20select%20either%20Sign%20in%20to%20GoDaddy%20(if%20your%20DNS%20records%20are%20managed%20by%20GoDaddy)%20or%20Add%20a%20TXT%20record%20instead%20for%20any%20other%20registrars%20%26gt%3B%20Next.%3C%2FP%3E%3CP%3EFollow%20the%20instructions%20provided%20for%20your%20DNS%20hosting%20provider.%20The%20TXT%20record%20usually%20is%20chosen%20to%20verify%20ownership.%3C%2FP%3E%3CP%3EYou%20can%20also%20find%20the%20instructions%20in%20Create%20DNS%20records%20at%20any%20DNS%20hosting%20provider%20for%20Office%20365.%3C%2FP%3E%3CP%3EAfter%20you%20add%20your%20TXT%20or%20MX%20record%2C%20wait%20about%2015%20minutes%20before%20proceeding%20to%20the%20next%20step.%3C%2FP%3E%3CP%3EIn%20the%20domain%20wizard%2C%20choose%20done%2C%20verify%20now%2C%20and%20you'll%20see%20a%20verification%20page.%20Choose%20Finish.%3C%2FP%3E%3CP%3EIf%20the%20verification%20fails%20at%20first%2C%20wait%20awhile%2C%20and%20try%20again.%3C%2FP%3E%3CP%3EDo%20not%20continue%20to%20the%20next%20step%20in%20the%20domains%20wizard.%20You%20now%20have%20verified%20that%20you%20own%20the%20on-premises%20Exchange%20organization%20domain%20and%20are%20ready%20to%20continue%20with%20an%20email%20migration.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20will%20finish%20setting%20up%20your%20domain%20after%20the%20migrations%20are%20complete.%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi Guys!

I seem to have a big problem with migrating on premise Exchange 2010 mail accounts over to Office 365 tenant. I have logged this with Microsoft multiple times, and not really getting anywhere - I keep been sent back and forwards between the On prem and O365 team... I will provide all steps taken and config below: 

 

Server Config:

Windows SBS 2008 R2, SP1

Exchange 2010

Steps done:

Verified the Office 365 txt record for the domain.

Configured AD sync, so mailboxes are appearing in the 365 portal.

Issue at hand:

When trying to run the Office Hybrid Migration Wizard, it errors at the end every time. I fill in all the correct details, step by step and get the following:

-The connection to the server "x" could not be completed. EWS/Mrsproxy.svc failed.

-Error details could not establish trust relationship for the SSL/TLS secure channel.

Steps advised and taken to try resolve:

-Server Reboot 

-Try create endpoint in Office 365 portal manually *Fails

-Enabled MRS proxy through power shell 

-Restarted IIS 

Additional Info: 

-A PST restore is just not feasible, there is around 20 mailboxes all 30-40GB

-Can browse to EWS/OWA Pages externally

-Server has self signed certificates

 

Any help with this would be greatly appreciated.

 

C

4 Replies

Hi @chuns2000,

 

You will need a valid Public certificate to implement hybrid.

 

Please read more here https://docs.microsoft.com/en-us/exchange/hybrid-deployment-prerequisites

 

Best Regards,
Nuno Árias Silva 

@chuns2000, if you are using a public certificate, the problem probably could be a firewall SSL inspection or a proxy.

 

Best Regards

 

Have a nice day

@Nuno Silva Thanks, I will import a public cert and go from there. I will let you know if it works. 

Sign in to Microsoft 365 or Office 365 with your work or school account.

 

Choose Setup > Domains.

On the Domains- page, click Add domain to start the domain wizard.

Choose Add domain

On the Add a domain page, type in the domain name (for example, Contoso.com) you use for your on-premises Exchange organization and then choose Next.

On the Verify domain page, select either Sign in to GoDaddy (if your DNS records are managed by GoDaddy) or Add a TXT record instead for any other registrars > Next.

Follow the instructions provided for your DNS hosting provider. The TXT record usually is chosen to verify ownership.

You can also find the instructions in Create DNS records at any DNS hosting provider for Office 365.

After you add your TXT or MX record, wait about 15 minutes before proceeding to the next step.

In the domain wizard, choose done, verify now, and you'll see a verification page. Choose Finish.

If the verification fails at first, wait awhile, and try again.

Do not continue to the next step in the domains wizard. You now have verified that you own the on-premises Exchange organization domain and are ready to continue with an email migration.

 

You will finish setting up your domain after the migrations are complete.