Loading
Microsoft Office 365 is showing TLS validation error in Task log but test is successful

Hi FNMS Champs,

 

I am facing an issue with FNMS office365 connector, it is configured on beacon and test shows successful, but when I execute the import I get TLS:

Inventory gathering failed. Error: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

 

Logs state below:

2026-06-10 14:02:14,873 [ERROR]    Microsoft.PowerShell.Commands.WriteErrorException: Error occurred trying to get the access token: Get-TokenSetInternal failed

2026-06-10 14:02:15,904 [INFO ]    Failed to execute Reader 'Get Users from Office 365' from file C:\ProgramData\Flexera Software\Compliance\ImportProcedures\Inventory\Reader\microsoft 365\User.xml, at step line 1

Error: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

2026-06-10 14:02:15,904 [INFO ]    All retries have been attempted for Reader 'Get Users from Office 365'

2026-06-10 14:02:15,904 [INFO ]    Completed with error in 1 second.

2026-06-10 14:02:15,904 [ERROR]   System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

  at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)

  at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)

  at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)

 

Can someone guide on this. There is a zscaler in between and as per team they have white listed login and graph urls.

 

Thanks!!


  • JohnSorensenDK (Flexera Software)

    @fawad_laiq​ 

    These symptoms look like a certificate issue to me. Did you recently refresh the tokens?

     

    A workaround that you may want to test would be to configure the CheckCertificateRevocation registry key value on the beacon server to see if this would have an impact:

    Please inform the forum members of its resolution if you think they would benefit from it.

     

    Thanks,

    John Sorensen

    Expand Post

Related  Product Forums


                     → Flexera One



                      → Snow Atlas



                      → FlexNet Manager



                      → Snow License Manager



                       → App Broker


       Need help finding an answer?


        Ask a Question →


Loading
Microsoft Office 365 is showing TLS validation error in Task log but test is successful