I have a problem with our dev environment. We make use of a self certificate what results in the error:

Microsoft.SharePoint.SPImmutableCertificateValidator.Validate(X509Certificate2 certificate) +1274

so what i would like to do is to turn off the validation in our environment. I did find the following fix:

<authentication certificateValidationMode="None" />

it doesn't seem to work.

here is a sample of a part of the web.config

<service saveBootstrapTokens="true">
  <audienceUris />
  <issuerNameRegistry type="Microsoft.SharePoint.IdentityModel.SPPassiveIssuerNameRegistry, Microsoft.SharePoint, Version=, Culture=neutral, PublicKeyToken=71e9bce111e9429c" />
  <issuerTokenResolver type="Microsoft.SharePoint.IdentityModel.SPIssuerTokenResolver, Microsoft.SharePoint.IdentityModel, Version=, Culture=neutral, PublicKeyToken=71e9bce111e9429c" />
    <clear />
    <add type="Microsoft.IdentityModel.Tokens.X509SecurityTokenHandler, Microsoft.IdentityModel, Version=, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
    <add type="Microsoft.SharePoint.IdentityModel.SPSaml11SecurityTokenHandler, Microsoft.SharePoint.IdentityModel, Version=, Culture=neutral, PublicKeyToken=71e9bce111e9429c">
        <nameClaimType value="http://schemas.microsoft.com/sharepoint/2009/08/claims/userid" />
    <add type="Microsoft.SharePoint.IdentityModel.SPTokenCache, Microsoft.SharePoint.IdentityModel, Version=, Culture=neutral, PublicKeyToken=71e9bce111e9429c" />
    <wsFederation passiveRedirectEnabled="false" issuer="https://none" realm="https://none" />
    <cookieHandler mode="Custom" path="/">
      <customCookieHandler type="Microsoft.SharePoint.IdentityModel.SPChunkedCookieHandler, Microsoft.SharePoint.IdentityModel, Version=, Culture=neutral, PublicKeyToken=71e9bce111e9429c" />
  <certificateValidation certificateValidationMode="None" />

  • Can you add some context to the error ? Any ULS entries and surrounding items would help as well. As far as the web.config - SharePoint has more than one. – Jesus Shelby Nov 11 '15 at 12:45

SharePoint supports self signed certificates. You may need to add it to the trusted root certificates.

  1. Export the cert without the private key
  2. Open Central Administration =>Security =>Manage Trust
  3. Add a new entry and where it asks for new trusted root authority upload your certificate

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.