"Workplace Join discovery failed" with exit code 0x80072F0D

Applies to: Windows 8.1 EnterpriseWindows Server 2012 R2 DatacenterWindows Server 2012 R2 Standard


When a user tries to perform a Workplace Join operation, she receives the following error message:

Confirm you are using the current sign-in info, and that your workplace uses this feature. Also, the connection to your workplace might not be working right now. Please wait and try again.

Additionally, an administrator may see the following event details in Event Viewer:

Event ID:102
Log Name:Microsoft-Windows-Workplace Join/Admin
Source:Microsoft-Windows-Workplace Join
Description:Workplace Join discovery failed.

Exit Code: 0x80072F0D.

The certificate authority is invalid or incorrect. Could not connect to 'https://EnterpriseRegistration.domain.com:443/EnrollmentServer/contract?api-version=1.0'.


This problem occurs because the DRS Service SSL certificate or a certificate in the issuance chain cannot be verified to a trusted issuer.


To resolve this problem, update the root certificates, and verify the issuer.

Update the root certificates

To update the root certificates, run Microsoft Update, and then make sure that the updates for root certificates are all installed.

Verify the issuer

Examine each certificate in the SSL certificate chain, and make sure that the issuer can be verified:
  1. Download the certificate to your local hard disk.
  2. Open a command prompt, and then run the following command:

    certutil -f -urlfetch -verify location_of_certificate
    Note The location_of_certificate placeholder represents the place where you downloaded the certificate, as in the following example:

    certutil -f -urlfetch -verify C:\temp\enterpriseregistration.contoso.com.crt


For more troubleshooting information, see the following article in the Microsoft Knowledge Base:

3045377 Diagnostic logging for troubleshooting Workplace Join issues
For additional troubleshooting specific to this problem, filter for Capi2 events 81, 11, and 30.