Adding a new Modern Authentication Application certificate when the existing one is due to expire
During the configuration of Modern Authentication, a required step is to create an Application Certificate within the credential manager in MailStore, and upload it to the Azure Portal. This certificate typically only lasts for 15 Months and therefore before it expires you will need to create a new one and replace it.
If you see errors warning that 'The certificate with identifier used to sign the client assertion is expired:' in a error response this is a clear indication that this certificate has expired and a new one needs to be created.
The following guide will take you through these steps.
Creating a new Certificate within MailStore Server
- Log on to MailStore Client as a MailStore Server administrator.
- Click on Administrative Tools > Users and Archives > Directory Services.
- In the Connection section, click on the button (…) next to the Credentials drop-down list.
- In the Credential Manager that appears, select the current credentials configured ( most likely called ‘MailStore Server’ and click on edit
- In the Microsoft Entra ID App Credentials dialog, click on the small down arrow on the Certificate line and choose ‘Create certificate
- Once created again click on the same down arrow and select Download Certificate. Save the certificate on your hard drive.
- Confirm your entries by clicking OK.
Publishing Credentials in Microsoft Entra ID
- Sign in to the Microsoft Entra ID Portal as a Global Administrator for your Microsoft 365 tenant.
- In the navigation menu (☰), select the option Microsoft Entra ID
- On the next page, select App registrations in the Manage section of the left navigation menu.
- Select All Applications. And select the ‘MailStore’ Application you previously configured.
- Select Certificates & secrets in the Manage section of the left navigation menu.
- You should see your previous expired certificate here. which you can delete once you have uploaded the new certificate.
- Click on Upload certificate in the Certificates section. Select the certificate file that you have saved previously and upload it to Microsoft Entra ID by clicking Add.
- If uploading has been successful, the certificate's thumbprint as well as its start and expiry dates appear in the certificates list. You can compare the thumbprint and expiry date with those listed in the MailStore Credential Manager to check that you've uploaded the correct certificate.
Related Articles
MailStore Error ‘The certificate with identifier used to sign the client assertion is expired on application. Reason – The key used is expired’
This warning has happened because the certificate you created when synchronising MailStore with your Microsoft Entra ID has now expired. To resolve this issue you will need to create a new one within MailStore and upload to your App registration ...How to reset the Microsoft Service Principle if it has expired (Basic Authentication)
When using MailStore to archive Microsoft Office365 and using the basic authentication one important step is to create a Service Principle account using the Microsoft Azure PowerShell interface. By default, this Service Principle account id is only ...ERROR: ‘This XML file does not appear to have any style information associated with it’
When users attempt to login to MailStore Using Microsoft login credentials, after authenticating directly with Microsoft they are redirected to a Mailstore URL and receive the following error: ‘This XML file does not appear to have any style ...MailStore Data integrity fails with "Message #xxxxx: Header for mime entity #xxxx is not available..."
After running a MailStore data Integrity check ( Or verify Store command) If you then see errors that look like: Message #148472: Header for mime entity #840552 is not available. Container: 3909.dat, Entry #29 This is explaining that the message with ...Exchange version not supported by current version of MailStore
if you are seeing an error like 'This version of Exchange server (15.21.92.6) is not supported by this version of MailStore' is due to Microsoft updating the Exchange version Office 365 uses for its tenets. This is a change by Microsoft that was not ...