"AD FS Token-Signing certificate is not valid until {0}" error after you run the MOSDAL Support Toolkit

Article ID: 2707370 - View products that this article applies to.
Not sure what release of Office 365 you're using? Go to the following Microsoft website:
Am I using Office 365 after the service upgrade?
Expand all | Collapse all

PROBLEM

After you run the Microsoft Online Services Diagnostics and Logging (MOSDAL) Support Toolkit, the Active Directory Federation Services (AD FS) diagnostics log shows the following error:
The AD FS Token-Signing certificate is not valid until {0}.
Note This log is located at Admin_Applications\SSO_Diagnostic_Tests\ADFSDiagnostic.txt.

Additionally, when you sign in to Office 365 resources by using single sign-on (SSO)-enabled user ID credentials, you may receive a "There was a problem accessing this site" error message before you can provide your credentials to AD FS 2.0.

CAUSE

This issue may occur if one of the following conditions is true:
  • There is an on-premises time issue is that's causing authentication problems.
  • The AD FS 2.0 token-signing certificate is expired because AD FS 2.0 certificate auto-renew is deactivated.

SOLUTION

To resolve this issue, use one of the following methods, as appropriate for your situation.

Method 1: Troubleshoot on-premises time issues

To resolve on-premises time issues that are causing the SSO authentication failure, see the following Microsoft Knowledge Base article:

2578667 "Your organization could not sign you in to this service" error and "80045C06" error code when a federated user tries to sign in to Office 365


Method 2: Reissue the token-signing certificate

To reissue the token-signing certificate, see the following Microsoft Knowledge Base article:

2383983 Error message from AD FS when a federated user signs in to Office 365: "There was a problem accessing the site"

MORE INFORMATION

Still need help? Go to the Office 365 Community website.

Properties

Article ID: 2707370 - Last Review: May 22, 2013 - Revision: 8.0
Applies to
  • Microsoft Office 365 for enterprises (pre-upgrade)
  • Microsoft Office 365 for education  (pre-upgrade)
  • Windows Azure Active Directory
Keywords: 
o365 o365a mosdal4.5 o365062011 pre-upgrade o365e o365022013 after upgrade o365m KB2707370

Give Feedback