I am trying to establis trust relationship between SP2010 and SP2013 environment

Steps have been followed as per following URL -

Everything works fine till Step 3. In Step 4, we need to consume SP2010 published search service application in SP2013. When I try to do that, I get following error in Central Admin UI –

Unable to connect to the specified address. Verify the URL you entered and contact the service administrator for more details.

I checked ULS logs and found following error –

An exception occurred when calling SPTopologyWebServiceApplicationProxy.EnumerateSharedServiceApplications on service https://SP_2010_Server:32844/Topology/topology.svc : System.ServiceModel.Security.SecurityNegotiationException: Could not establish trust relationship for the SSL/TLS secure channel with authority 'SP_2010_Server:32844'. ---> System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.    

It looks like SP2013 environment is not able to trust SSL certificate of SP2010 environment.

I verified following things –

  • SP2010 root certificate is already imported in SP2013 central admin under Security 
  • Manage Trust Firewall ports are open for 80, 443, 32843, 32844.
  • Ensured that access to SP2010 Topology service is granted to SP2013 farm (as mentioned note after Step 5)

I further tried following things –

  • Manually adding SP2010 root certificate to trusted root authority. Did not help.
  • Manually adding SP2010 certificate (for topology.svc) to certificate store.

Did not help either.

One important thing to note is that our SP2010 and SP2013 environment are in different domains.

Please let me know if you have any suggestions.

1 Answer 1


You are trying to crawl SharePoint 2013 farm in SharePoint 2010, AFAIK this is not gone happen. 2010 farm can be consumer not publisher for 2013.

Note. This only works one way and a SharePoint 2013 farm can not consume services from a SharePoint 2010 provider).


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.