{"id":875,"date":"2015-01-26T10:55:29","date_gmt":"2015-01-26T09:55:29","guid":{"rendered":"https:\/\/technet.cloud4you.biz\/?p=875"},"modified":"2021-03-26T11:43:34","modified_gmt":"2021-03-26T10:43:34","slug":"event-3005-id4175-crm-adfs-error","status":"publish","type":"post","link":"https:\/\/technet.cloud4you.biz\/en\/event-3005-id4175-crm-adfs-error\/","title":{"rendered":"Event 3005, ID4175 &#8211; CRM &#038; ADFS-Error"},"content":{"rendered":"<p><span style=\"text-decoration: underline;\"><strong>Fehler:<\/strong><\/span>\u00a0<pre id=\"code_snippet_183\" style=\"position:relative;width:100%;border:0;padding:0;\">Event code: 3005 \r\nEvent message: An unhandled exception has occurred. \r\nEvent time: 26.01.2015 09:16:59 \r\nEvent time (UTC): 26.01.2015 08:16:59 \r\nEvent ID: 7c097f8cb25c47eaaee0b06824c52971 \r\nEvent sequence: 861 \r\nEvent occurrence: 109 \r\nEvent detail code: 0 \r\n \r\nApplication information: \r\n    Application domain: \/LM\/W3SVC\/1\/ROOT-1-130666738292352050 \r\n    Trust level: Full \r\n    Application Virtual Path: \/ \r\n    Application Path: C:\\Program Files\\Microsoft Dynamics CRM\\CRMWeb\\ \r\n    Machine name: XXXXXXXX\r\n \r\nProcess information: \r\n    Process ID: 6392 \r\n    Process name: w3wp.exe \r\n    Account name: XXXX\\XXXXXXXXXX \r\n \r\nException information: \r\n    Exception type: SecurityTokenException \r\n    Exception message: ID4175: The issuer of the security token was not recognized by the IssuerNameRegistry. To accept security tokens from this issuer, configure the IssuerNameRegistry to return a valid name for this issuer.\r\n   at Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler.CreateClaims(SamlSecurityToken samlSecurityToken)\r\n   at Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler.ValidateToken(SecurityToken token)\r\n   at Microsoft.IdentityModel.Tokens.SecurityTokenHandlerCollection.ValidateToken(SecurityToken token)\r\n   at Microsoft.IdentityModel.Web.TokenReceiver.AuthenticateToken(SecurityToken token, Boolean ensureBearerToken, String endpointUri)\r\n   at Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SignInWithResponseMessage(HttpRequest request)\r\n   at Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs args)\r\n   at Microsoft.Crm.Authentication.Claims.CrmFederatedAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs args)\r\n   at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()\r\n   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean&amp; completedSynchronously)\r\n\r\n \r\n \r\nRequest information: \r\n    Request URL: https:\/\/XXXXXXXXX.XXXXXXXXX.XXXX:443\/default.aspx \r\n    Request path: \/default.aspx \r\n    User host address: XXX.XXX.XXX.XXX\r\n    User:  \r\n    Is authenticated: False \r\n    Authentication Type:  \r\n    Thread account name: XXXX\\XXXXXXXXXX \r\n \r\nThread information: \r\n    Thread ID: 24 \r\n    Thread account name: XXXX\\XXXXXXXXXX \r\n    Is impersonating: True \r\n    Stack trace:    at Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler.CreateClaims(SamlSecurityToken samlSecurityToken)\r\n   at Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler.ValidateToken(SecurityToken token)\r\n   at Microsoft.IdentityModel.Tokens.SecurityTokenHandlerCollection.ValidateToken(SecurityToken token)\r\n   at Microsoft.IdentityModel.Web.TokenReceiver.AuthenticateToken(SecurityToken token, Boolean ensureBearerToken, String endpointUri)\r\n   at Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SignInWithResponseMessage(HttpRequest request)\r\n   at Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs args)\r\n   at Microsoft.Crm.Authentication.Claims.CrmFederatedAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs args)\r\n   at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()\r\n   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean&amp; completedSynchronously)\r\n \r\n \r\nCustom event details: \r\n<\/pre><\/p>\n<p><span style=\"text-decoration: underline;\"><strong>Ursache:<br \/>\n<\/strong><\/span>Wenn das selbsterstellte Zertifikat zur Kommunikation zwischen CRM und ADFS kurz vorm auslaufen ist (~1 Woche), stellt das ADFS ein neues Zertifikat aus und verwendet dieses auch sofort. Die eigentlichen CRM-Server bekommen davon allerdings wenig mit, haben immer noch den Thumbprint vom alten Zertifikat gespeichert und k\u00f6nnen mit dem nun verwendeten neuen gar nichts anfangen. Dies versucht uns diese Fehlermeldung zu \u00fcbermitteln.<\/p>\n<p><span style=\"text-decoration: underline;\"><strong>Behebung:<\/strong><\/span><br \/>\nZuerst f\u00fchren wir auf dem ADFS-Server folgende Powershell-Befehle aus:\u00a0<pre id=\"code_snippet_184\" style=\"position:relative;width:100%;border:0;padding:0;\">Set-AdfsProperties -AutoCertificateRollover $true\r\nUpdate-AdfsCertificate -Urgent<\/pre> Im Anschluss daran \u00f6ffnen wir den CRM Deployment Manager auf dem CRM-Server und f\u00fchren diese beiden Assistenten nochmals aus:<\/p>\n<ul>\n<li>Configure Claims-Based Authentication\u00a0<span style=\"color: #ff0000;\">Unbedingt richtiges (neues) Zertifikat ausw\u00e4hlen.<\/span><\/li>\n<li>Configure Internet-Facing Deployment<\/li>\n<\/ul>\n<p>Diese m\u00fcssen einfach nur durchgeklickt werden, sprich &#8220;Next&#8221;, &#8220;Next&#8221;, [&#8230;], Apply.<br \/>\nZur\u00fcck auf dem ADFS-Server muss nun der ADFS-Dienst neugestartet werden (&#8220;Active Directory Federation Services&#8221;).<br \/>\nJetzt gehts wieder zum CRM-Server, wo der &#8220;Microsoft Dynamics CRM Asynchronous Processing Service&#8221; neugestartet werden muss. Als letzter Schritt muss noch ein iisreset ausgef\u00fchrt werden. Nun sollte alles wieder gehen.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Fehler:\u00a0 Ursache: Wenn das selbsterstellte Zertifikat zur Kommunikation zwischen CRM und ADFS kurz vorm auslaufen ist (~1 Woche), stellt das ADFS ein neues Zertifikat aus und verwendet dieses auch sofort. Die eigentlichen CRM-Server bekommen davon allerdings wenig mit, haben immer noch den Thumbprint vom alten Zertifikat gespeichert und k\u00f6nnen mit dem nun verwendeten neuen gar [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[74,77],"tags":[75,209,79],"class_list":["post-875","post","type-post","status-publish","format-standard","hentry","category-adfs","category-crm","tag-adfs-3-0","tag-crm","tag-unexpected-error"],"translation":{"provider":"WPGlobus","version":"3.0.6","language":"en","enabled_languages":["de","en"],"languages":{"de":{"title":true,"content":true,"excerpt":false},"en":{"title":false,"content":false,"excerpt":false}}},"_links":{"self":[{"href":"https:\/\/technet.cloud4you.biz\/en\/wp-json\/wp\/v2\/posts\/875","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/technet.cloud4you.biz\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/technet.cloud4you.biz\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/technet.cloud4you.biz\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/technet.cloud4you.biz\/en\/wp-json\/wp\/v2\/comments?post=875"}],"version-history":[{"count":3,"href":"https:\/\/technet.cloud4you.biz\/en\/wp-json\/wp\/v2\/posts\/875\/revisions"}],"predecessor-version":[{"id":2809,"href":"https:\/\/technet.cloud4you.biz\/en\/wp-json\/wp\/v2\/posts\/875\/revisions\/2809"}],"wp:attachment":[{"href":"https:\/\/technet.cloud4you.biz\/en\/wp-json\/wp\/v2\/media?parent=875"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/technet.cloud4you.biz\/en\/wp-json\/wp\/v2\/categories?post=875"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/technet.cloud4you.biz\/en\/wp-json\/wp\/v2\/tags?post=875"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}