Symptom

Microsoft will make the following changes in the Microsoft Online Syndication Interface (MOSI) configuration on Feb. 18th, 2015:

  • a new Microsoft Client Certificate will be used
  • new MOSI Incoming and Outgoing IP Addresses will be added

You must update the configuration of your Microsoft Office 365 installations before this date.

Important: The new MOSI Outgoing IP Addresses are already active.

Resolution

  1. Obtain the new Microsoft Client Certificate and MOSI Incoming/Outgoing IP Addresses from Microsoft.
  2. Update the configuration of your Microsoft Office 365 installations. See the instructions below.

Microsoft Office 365 Version 5.x and Higher

  1. Add the new Microsoft Client Certificate:
    1. Log on to the Office 365 Application End-point Host as Administrator.
    2. Place the new Microsoft Client Certificate on the host.
    3. Open the Microsoft Management Console (MMC).
    4. In the top menu, go to File > Add/Remove Snap-in.
    5. Select the Certificates snap-in and click Add.
    6. Select the Computer account option and click Next.
    7. Select the Local computer option and click Finish.
    8. Click OK.
    9. Go to the Personal folder and choose the All Tasks > Import... command in the right-click pop-up menu. Follow the Certificate Import Wizard instructions to import the new Microsoft Client Certificate. Do not remove the old Microsoft Client Certificate.
    10. In the Microsoft Management Console (MMC), double click on the just imported certificate and select the Details tab.
    11. Write down the value of the Thumbprint property.
    12. Open the Internet Information Services (IIS) Manager.
    13. In the navigation tree, select the Office 365 Dispatcher Site. Then, select the Office 365 Dispatcher Application.
    14. Right-click the Office 365 Dispatcher Application and select Explore in the menu.
    15. Open the settings.config file in a text editor.
    16. Add the certificate thumbprint to the list of values of the <add key="Allowed_Certificates" value="..."/> item. For example: <add key="Allowed_Certificates" value="a582b37a85aa520cad9191730644ace12fe29ca9,c582b37a85aa520cad9191730644ace12fe29ca9"/>.
    17. Save the file.
    18. Run cmd.exe and execute the iisreset command.
  2. Update the configuration of your firewall to add the new MOSI IP Addresses. See Odin Automation Premium Office 365 Integration Provider's Guide >> Syndication Partner Scenario > Firewall Requirements > Office 365 Application End-point Host for details ( http://download.automation.odin.com/poa/Office365_APS2/doc/index.htm?fileName=83014.htm).

Microsoft Office 365 Version 4.x and Lower

  1. Add the new Microsoft Client Certificate:
    1. Log on to the Office 365 Gateway Host as Administrator.
    2. Place the new Microsoft Client Certificate on the host.
    3. Open the Microsoft Management Console (MMC).
    4. In the top menu, go to File > Add/Remove Snap-in.
    5. Select the Certificates snap-in and click Add.
    6. Select the Computer account option and click Next.
    7. Select the Local computer option and click Finish.
    8. Click OK.
    9. Go to the Personal folder and choose the All Tasks > Import... command in the right-click pop-up menu. Follow the Certificate Import Wizard instructions to import the new Microsoft Client Certificate. Do not remove the old Microsoft Client Certificate.
  2. Update the configuration of your firewall to add the new MOSI IP Addresses. See Odin Automation Premium Office 365 Integration Provider's Guide >> Useful Information > Firewall Requirements > Office 365 Gateway Host for details (http://download.pa.parallels.com/poa/Office365/doc/70531.htm).
  3. Update the configuration of your Office 365 Gateway/Dispatcher Applications to add the new MOSI IP Addresses. See Odin Automation Premium Office 365 Integration Provider's Guide >> Deploying Office 365 Application > Preparing Provisioning Gateway Host and Office 365 Gateway Host > Securing Office 365 Gateway Host for details (http://download.pa.parallels.com/poa/Office365/doc/71719.htm).

The Following IP Addresses Must be Allowed for Your Office 365 Gateway Server / Office 365 Application End-point Host to Communicate with the Microsoft Cloud (MOSI API):

MOSI Incoming IP Addresses (Connections from Your Office 365 Gateway Server / Office 365 Application End-point Host to the Microsoft Cloud)

  • 65.55.171.170
  • 65.55.63.226
  • 65.55.7.18 (new)
  • 134.170.48.182 (new)

MOSI Outgoing IP Addresses (Connections from the Microsoft Cloud to Your Office 365 Gateway Server / Office 365 Application End-point Host)

  • 65.55.171.190
  • 65.55.63.228 (new)
  • 65.55.7.5 (new)
  • 134.170.48.136 (new)
  • 134.170.48.137 (new)

Internal content

Link on internal Article