Loading
Microsoft Office 365 is showing TLS validation error in Task log but test is successful

Hi FNMS Champs,

 

I am facing an issue with FNMS office365 connector, it is configured on beacon and test shows successful, but when I execute the import I get TLS:

Inventory gathering failed. Error: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

 

Logs state below:

2026-06-10 14:02:14,873 [ERROR]    Microsoft.PowerShell.Commands.WriteErrorException: Error occurred trying to get the access token: Get-TokenSetInternal failed

2026-06-10 14:02:15,904 [INFO ]    Failed to execute Reader 'Get Users from Office 365' from file C:\ProgramData\Flexera Software\Compliance\ImportProcedures\Inventory\Reader\microsoft 365\User.xml, at step line 1

Error: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

2026-06-10 14:02:15,904 [INFO ]    All retries have been attempted for Reader 'Get Users from Office 365'

2026-06-10 14:02:15,904 [INFO ]    Completed with error in 1 second.

2026-06-10 14:02:15,904 [ERROR]   System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

  at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)

  at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)

  at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)

 

Can someone guide on this. There is a zscaler in between and as per team they have white listed login and graph urls.

 

Thanks!!


  • JohnSorensenDK (Flexera Software)

    @fawad_laiq​ 

    These symptoms look like a certificate issue to me. Did you recently refresh the tokens?

     

    A workaround that you may want to test would be to configure the CheckCertificateRevocation registry key value on the beacon server to see if this would have an impact:

    Please inform the forum members of its resolution if you think they would benefit from it.

     

    Thanks,

    John Sorensen

    Expand Post

Loading
Microsoft Office 365 is showing TLS validation error in Task log but test is successful