Symptom
Microsoft will make the following changes in the Microsoft Online Syndication Interface (MOSI) configuration on Feb. 18th, 2015:
- a new Microsoft Client Certificate will be used
- new MOSI Incoming and Outgoing IP Addresses will be added
You must update the configuration of your Microsoft Office 365 installations before this date.
Important: The new MOSI Outgoing IP Addresses are already active.
Resolution
- Obtain the new Microsoft Client Certificate and MOSI Incoming/Outgoing IP Addresses from Microsoft.
- Update the configuration of your Microsoft Office 365 installations. See the instructions below.
Microsoft Office 365 Version 5.x and Higher
- Add the new Microsoft Client Certificate:
- Log on to the Office 365 Application End-point Host as Administrator.
- Place the new Microsoft Client Certificate on the host.
- Open the Microsoft Management Console (MMC).
- In the top menu, go to File > Add/Remove Snap-in.
- Select the Certificates snap-in and click Add.
- Select the Computer account option and click Next.
- Select the Local computer option and click Finish.
- Click OK.
- Go to the Personal folder and choose the All Tasks > Import... command in the right-click pop-up menu. Follow the Certificate Import Wizard instructions to import the new Microsoft Client Certificate. Do not remove the old Microsoft Client Certificate.
- In the Microsoft Management Console (MMC), double click on the just imported certificate and select the Details tab.
- Write down the value of the Thumbprint property.
- Open the Internet Information Services (IIS) Manager.
- In the navigation tree, select the Office 365 Dispatcher Site. Then, select the Office 365 Dispatcher Application.
- Right-click the Office 365 Dispatcher Application and select Explore in the menu.
- Open the
settings.config
file in a text editor. - Add the certificate thumbprint to the list of values of the <add key="Allowed_Certificates" value="..."/> item. For example: <add key="Allowed_Certificates" value="a582b37a85aa520cad9191730644ace12fe29ca9,c582b37a85aa520cad9191730644ace12fe29ca9"/>.
- Save the file.
- Run
cmd.exe
and execute theiisreset
command.
- Update the configuration of your firewall to add the new MOSI IP Addresses. See Odin Automation Premium Office 365 Integration Provider's Guide >> Syndication Partner Scenario > Firewall Requirements > Office 365 Application End-point Host for details ( http://download.automation.odin.com/poa/Office365_APS2/doc/index.htm?fileName=83014.htm).
Microsoft Office 365 Version 4.x and Lower
- Add the new Microsoft Client Certificate:
- Log on to the Office 365 Gateway Host as Administrator.
- Place the new Microsoft Client Certificate on the host.
- Open the Microsoft Management Console (MMC).
- In the top menu, go to File > Add/Remove Snap-in.
- Select the Certificates snap-in and click Add.
- Select the Computer account option and click Next.
- Select the Local computer option and click Finish.
- Click OK.
- Go to the Personal folder and choose the All Tasks > Import... command in the right-click pop-up menu. Follow the Certificate Import Wizard instructions to import the new Microsoft Client Certificate. Do not remove the old Microsoft Client Certificate.
- Update the configuration of your firewall to add the new MOSI IP Addresses. See Odin Automation Premium Office 365 Integration Provider's Guide >> Useful Information > Firewall Requirements > Office 365 Gateway Host for details (http://download.pa.parallels.com/poa/Office365/doc/70531.htm).
- Update the configuration of your Office 365 Gateway/Dispatcher Applications to add the new MOSI IP Addresses. See Odin Automation Premium Office 365 Integration Provider's Guide >> Deploying Office 365 Application > Preparing Provisioning Gateway Host and Office 365 Gateway Host > Securing Office 365 Gateway Host for details (http://download.pa.parallels.com/poa/Office365/doc/71719.htm).
The Following IP Addresses Must be Allowed for Your Office 365 Gateway Server / Office 365 Application End-point Host to Communicate with the Microsoft Cloud (MOSI API):
MOSI Incoming IP Addresses (Connections from Your Office 365 Gateway Server / Office 365 Application End-point Host to the Microsoft Cloud)
- 65.55.171.170
- 65.55.63.226
- 65.55.7.18 (new)
- 134.170.48.182 (new)
MOSI Outgoing IP Addresses (Connections from the Microsoft Cloud to Your Office 365 Gateway Server / Office 365 Application End-point Host)
- 65.55.171.190
- 65.55.63.228 (new)
- 65.55.7.5 (new)
- 134.170.48.136 (new)
- 134.170.48.137 (new)