"SSL certificate could not be checked for revocation" error when you connect through Windows Remote PowerShell in Office 365 dedicated

Symptoms

When you try to connect to your managed environment by using Windows Remote PowerShell in Microsoft Office 365 dedicated, you receive the following error message:

The SSL certificate could not be checked for revocation. The server used to check for revocation might be unreachable.

Cause

This issue occurs if the Microsoft Exchange server from which you are running Windows Remote PowerShell does not have access to the Internet to complete a Secure Sockets Layer (SSL) certificate revocation check.

Resolution

To resolve this issue, configure your session object to skip the revocation check. To do this, follow these steps:
  1. Declare a variable that's named $cred, and then set the value for the variable to the results of the Get-Credential prompt (your user name and password). To do this, follow these steps:
    1. Type the following cmdlet in Windows Remote PowerShell, and then press Enter:
      $cred = Get-Credential 
    2. When the Get-Credential cmdlet prompts you for credentials, type the credentials that you use to authenticate the remote Exchange server. The credentials that you type are stored in the $cred variable.
  2. Declare a variable that's named $sessionOption, and then set the value for the variable to skip the revocation check. To do this, run the following cmdlet in Remote PowerShell:
    $sessionOption = New-PSSessionOption -SkipRevocationCheck 
  3. Declare a variable that's named $session, and then set the value for the variable to a new PowerShell remote session. To do this, run the following cmdlet in Remote PowerShell:
    $session = New-PSSession -Authentication basic -Credential $cred -ConnectionUri https://mail.contoso.com/PowerShell/ -ConfigurationName Microsoft.Exchange -AllowRedirection -SessionOption $sessionOption 
You can also combine three steps into one script. To do this, run the following cmdlet in Remote PowerShell:

Import-PSSession (New-PSSession -Authentication basic -Credential (Get-Credential) -ConnectionUri https://mail.contoso.com/powershell -ConfigurationName Microsoft.Exchange -SessionOption (New-PSSessionOption -SkipRevocationCheck)) 

Properties

Article ID: 2792168 - Last Review: Jan 15, 2016 - Revision: 1

Feedback