{"id":24887,"date":"2022-06-16T12:34:05","date_gmt":"2022-06-16T10:34:05","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=24887"},"modified":"2022-06-16T12:42:59","modified_gmt":"2022-06-16T10:42:59","slug":"exchange-2016-2019-mitigation-service-error-1008-wegen-abgelaufenem-zertifikat","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2022\/06\/16\/exchange-2016-2019-mitigation-service-error-1008-wegen-abgelaufenem-zertifikat\/","title":{"rendered":"Exchange 2016\/2019 Mitigation Service Error 1008 due to expired certificate"},"content":{"rendered":"

\"Exchange[German<\/a>]Today another piece of information for administrators of Microsoft Exchange servers who this week suddenly receive an Error 1008 on Exchange 2016 or 2019 in the event logs, which is triggered by the Mitigation Service. A blog reader brought this to my attention the other day because he suddenly experienced the issue on Microsoft Exchange Server 2019. The background is a Microsoft \"Microsoft Exchange XML Signing\" certificate that expired on June 9, 2022. The problem should have been fixed by Microsoft in the meantime.<\/p>\n

<\/p>\n

Mitigation Service Error 1008 in log files<\/h2>\n

\"\"Blog reader Phil Randal contacted me via email on June 14, 2022, and pointed out that on Microsoft Exchange (on his end it was Exchange 2019), Mitigation Service Error 1008 could suddenly appear in the Event Viewer application logs (thanks for the tip).<\/p>\n

Hi Gunter,<\/p>\n

Noticing Application log error 1008 on our exchange servers:<\/p>\n

\"Exception encountered while fetching mitigations : System.Exception: This XML is not deemed safe to consume since\u00a0 Response xml's signing cert is invalid or not from Microsoft\"<\/p><\/blockquote>\n

Exchange Server encounters an exception error when applying mitigation and reports that an XML file cannot be used safely because the signing certificate of Response xml is invalid or not from Microsoft. Phil then referred me to a reddit.com thread Mitigation Service XML errors since CU23 upgrade<\/a>\u00a0where this is also addressed.<\/p>\n

Mitigation Service XML errors since CU23 upgrade<\/strong><\/p>\n

Good morning!<\/p>\n

Since the upgrade to 2016 CU23, I've noticed several machines are throwing a new XML error regarding the Mitigation Service (EEM). We've been running 2016 CU22 on various clients with no issues and this error was never present. Since the upgrade to CU23, we're seeing this all over the place.<\/p>\n

Microsoft Forums seem to suggest this is the result of a network connection being blocked to the IPs used by EEM. But the only thing that has changed is installing CU23, there's nothing new blocking these connections.<\/p>\n

Testing the Mitigation Service passes fine. I'm able to access the URL for the mitigations just fine from these machines in a web browser. Clearly, nothing is being blocked.<\/p>\n

Here's the full error:<\/p>\n

An unexpected exception occurred. Diagnostic information: \r\nException encountered while fetching mitigations: \r\nSystem.Exception: This XML is not deemed safe to consume since Response \r\nxml's signing cert is invalid or notfrom microsoft at\r\n\r\nMicrosoft.Exchange.Mitigation.Service.Common.SignatureVerifierUtils.ThrowIfIntegrityChecksFail(SafeXmlDocument xmlDoc) at Microsoft.Exchange.Mitigation.Service.Common.SignatureVerifierUtils.GetValidatedDocumentWithoutSignature(SafeXmlDocument xmlDoc) at Microsoft.Exchange.Mitigation.Service.Common.Utils.FetchDataFromXmlStream[T](Stream stream) at Microsoft.Exchange.Mitigation.Service.Common.Utils.FetchMitigationsFromUrl[T](String url, RemoteCertificateValidationCallback certValidationCallback, X509Certificate clientAuthCert, Boolean isResponseJson) at Microsoft.Exchange.Mitigation.Service.MitigationCloudServiceV2.FetchMitigations() at Microsoft.Exchange.Mitigation.Service.Mitigations.MitigationEngine.FetchAndApplyMitigation()<\/pre>\n<\/blockquote>\n
Also on Microsoft Q&A, there is an Exchange 2019 Mitigation service error 1008<\/a> post where an affected person addresses the issue.<\/p>\n
\n
Exchange 2019 Mitigation service error 1008<\/h4>\n
Hi,
\nI regularly receive error 1008
\nException encountered while fetching mitigations : System.Exception: This XML is not deemed safe to consume since Response xml's signing cert is invalid or not from microsoft<\/p>\n
The issue started June 9.<\/p>\n
Any suggestions?<\/p>\n
King regards,
\nDmitry<\/p><\/blockquote>\n
Certificate expired at Microsoft<\/h2>\n
A Microsoft employee then got in touch on reddit.com and wrote that the error had nothing to do with the CU23, but with an expired certificate on the service's side – the certificate expired on June 9, 20222. Microsoft is working to fix it on the service side (admins don't have to do anything). The issue is only cosmetic at the moment, he said, and Microsoft has not released any contingency measures.<\/p>\n
The Microsoft Q&A thread Exchange 2019 Mitigation service error 1008<\/a> contains a reader comment pointing to this article<\/a> from The Register. There, on June 10, 2022, it was reported that Microsoft forgot to renew the certificate for the Windows Insider website. Visitors then received the message \"Your connection is not private\".<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"
[German]Today another piece of information for administrators of Microsoft Exchange servers who this week suddenly receive an Error 1008 on Exchange 2016 or 2019 in the event logs, which is triggered by the Mitigation Service. A blog reader brought this … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[463,1547],"tags":[869,47],"class_list":["post-24887","post","type-post","status-publish","format-standard","hentry","category-issue","category-software","tag-exchange","tag-issue"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/24887","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=24887"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/24887\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=24887"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=24887"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=24887"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}