Introduction
In this guide, we will address how to eliminate the “Not secure” message that appears in the URL bar when connecting to Dynamics 365 for Finance and Operations (D365FO) in a local development environment known as OneBox. We will explore why this issue arises and provide a step-by-step solution to fix it.
Understanding the Issue
The problem originates from the site certificate not meeting the latest security standards. Google Chrome, starting from version 58, uses only the subjectAlternativeName
extension, not the commonName
, to validate the domain name against the site certificate. This change means that if the certificate does not comply with these standards, Chrome will flag it as invalid. Although Internet Explorer (IE) is less strict and may not show this warning, the issue is significant for Chrome users. More information can be found at this link: Google Chrome Security Support.
Solution Steps
Step 1: Generate a New Self-Signed Certificate
To address this issue, you need to create a new self-signed certificate. Follow these steps:
Open PowerShell as an Administrator.
Run the following command:
New-SelfSignedCertificate -Subject "CN=*.cloud.onebox.dynamics.com,O=Microsoft Corporation,L=Redmond,S=WA,C=US" -DnsName "*.cloud.onebox.dynamics.com", "usnconeboxax1ecom.cloud.onebox.dynamics.com", "usnconeboxax1pos.cloud.onebox.dynamics.com", "usnconeboxax1ret.cloud.onebox.dynamics.com" -CertStoreLocation "cert:\LocalMachine\My" -KeyUsage DataEncipherment, KeyEncipherment, DigitalSignature -HashAlgorithm "SHA384" -KeyAlgorithm RSA -KeyLength 2048 -NotAfter (Get-Date).AddYears(5)
This command generates a new certificate that is valid for 5 years. Alternatively, you can use the free Self-Signed Certificate Generator available online.Step 2: Copy the New Certificate to Trusted Root Certification Authorities
- Open the "Manage Computer Certificates" utility (
certlm.msc
). - Locate the newly created certificate in the
Personal\Certificates
folder. This certificate will have a new expiration date compared to the old one. - Copy this certificate and paste it into the
Trusted Root Certification Authorities\Certificates
folder.
Step 3: Bind the New Certificate with D365FO
- Open Internet Information Services (IIS) Manager.
- Navigate to the
AOSService
site. - Click on the
Bindings
link on the right-hand side. - Select the appropriate hostname and click on the
Edit
button. - In the
Edit Site Binding
dialog, open the SSL certificate drop-down menu. - You will see two certificates with the name
*.cloud.onebox.dynamics.com
. Select the newly created certificate. Verify by clicking theView
button to ensure it has the correct expiration date. - Confirm any prompts to update the certificate for other related sites.
Step 4: Restart the AOSService and Test the Connection
- Close all open dialogs and restart the AOSService. You can do this by clicking the
Restart
link underManage Websites
in the right-hand pane. - Restart Google Chrome and navigate to D365FO.
After completing these steps, your connection to D365FO should now be marked as secure in Chrome, eliminating the “Not secure” warning.
By following this guide, you ensure that your development environment in OneBox adheres to modern security standards and provides a secure browsing experience.
- Open the "Manage Computer Certificates" utility (
Comments
Post a Comment