You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
title: Certificate assignment fails and returns error 0xe434352
3
+
description: This article provides the resolution for error 0xe434352 that occurs during certificate assignment if unsupported characters are used in the domain name of Receive Connectors.
4
+
#customer intent: As an Exchange Server administrator, I want to resolve SMTP (Simple Mail Transfer Protocol) certificate binding issues that are caused by invalid fully-qualified domain names (FQDNs) so that I can maintain system reliability.
5
+
author: cloud-writer
6
+
ms.author: meerak
7
+
manager: dcscontentpm
8
+
audience: ITPro
9
+
ms.topic: troubleshooting
10
+
ms.custom:
11
+
- sap:Administrative Tasks
12
+
- Exchange Server
13
+
- CSSTroubleshoot
14
+
ms.reviewer: igserr, batre, arindamt, v-kccross
15
+
appliesto:
16
+
- Exchange Server SE
17
+
- Exchange Server 2019
18
+
- Exchange Server 2016
19
+
search.appverid: MET150
20
+
ms.date: 01/28/2026
21
+
---
22
+
23
+
# Error 0xe434352 and SMTP certificate assignment fails
24
+
25
+
## Summary
26
+
27
+
When you assign certificates to Exchange services, you might encounter error 0xe0434352 during the certificate binding process. The error indicates that one or more Receive Connectors in Microsoft Exchange Server use FQDNs that contain characters not allowed by DNS standards.
28
+
29
+
## Symptoms
30
+
31
+
You run the `Enable-ExchangeCertificate` cmdlet to assign a certificate to the SMTP service. The operation fails and returns the following error message:
32
+
33
+
> The Exchange Certificate operation has failed with an exception on server <*Server Name*>.
34
+
>
35
+
> The error message is: Unknown error (0xe0434352)
36
+
37
+
## Cause
38
+
39
+
This issue occurs if the FQDN of one or more Receive Connectors contains unsupported characters. The connector creation process allows underscores in the domain name. However, underscores violate DNS standards and cause failures during certificate binding.
40
+
41
+
For more information about domain names, see the following articles:
You can run diagnostics to identify and resolve issues in Microsoft Purview. The diagnostics offer insights into known issues and provide instructions to fix them. Although the diagnostics can fix some configuration issues, they don't make changes to your tenant without your consent.
23
+
You can run diagnostics to identify and resolve issues in Microsoft Purview. The diagnostics offer insights into known issues, and provide instructions to fix the issues. Although the diagnostics can fix some configuration issues, they don't make changes to your tenant without your consent.
24
24
25
25
Self-help diagnostics that relate to Microsoft Purview are available in the following locations:
@@ -53,22 +53,28 @@ You can find these diagnostics on the following portal pages:
53
53
54
54
The following table lists the available diagnostics on **Solutions** pages. You can access the diagnostics by selecting the associated link in the fourth column. When you're prompted, sign in to the Microsoft Purview portal.
55
55
56
-
**Note**: To run these diagnostics, the minimum requirement is that you're an administrator with the Organization Configuration role assigned to you.
56
+
> [!NOTE]
57
+
> To run these diagnostics, you must meet the minimum requirements:
58
+
> - Be an administrator
59
+
> - Have the Organization Configuration role assigned to you
57
60
58
-
When you select a diagnostic on a Solutions page, it begins by running the [Check-PurviewConfig](/powershell/module/exchangepowershell/check-purviewconfig) cmdlet to check your organization's configuration settings in Microsoft Purview. Then the diagnostic calls the appropriate cmdlet listed in the following table to perform checks that are specific to your issue.
61
+
When you select a diagnostic on a Solutions page, the diagnostic runs the [Check-PurviewConfig](/powershell/module/exchangepowershell/check-purviewconfig) cmdlet to check your organization's configuration settings in Microsoft Purview. Then, the diagnostic calls the appropriate cmdlet that's listed in the following table to perform checks that are specific to your issue.
| Email encryption isn't working as expected. Are there any issues with my licenses or settings? | Checks license availability for sensitivity labels. Also checks information protection settings for your tenant, including Information Rights Management (IRM) and transport rule settings. Validates encryption settings. |[Test-IrmConfiguration](/powershell/module/exchangepowershell/test-irmconfiguration)|[Information Protection diagnostics](https://purview.microsoft.com/informationprotection/diagnostics)|
65
+
| Email encryption isn't working as expected. Are there any issues that affect my licenses or settings? | Checks license availability for sensitivity labels. Also checks information protection settings for your tenant, including Information Rights Management (IRM) and transport rule settings. Verifies encryption settings. |[Test-IrmConfiguration](/powershell/module/exchangepowershell/test-irmconfiguration)|[Information Protection diagnostics](https://purview.microsoft.com/informationprotection/diagnostics)|
63
66
| A user can't find the sensitivity label they need. Does the label policy apply to them? | Checks which sensitivity labels are available to the user. Diagnostic results include information such as the label names, settings, and where the labels are available. |[Get-label](/powershell/module/exchangepowershell/get-label) <br> [Get-LabelPolicy](/powershell/module/exchangepowershell/get-labelpolicy)|[Information Protection diagnostics](https://purview.microsoft.com/informationprotection/diagnostics)|
67
+
| Autolabeling isn’t applied to a SharePoint or OneDrive file. Was the file evaluated correctly, and did it meet the autolabeling conditions? | Checks a file’s properties and classification to determine whether autolabeling was applied. When entering the file path, make sure that you provide the full file path, not a sharing link. <br> <br> Tips for finding the correct path: <br> - In SharePoint or OneDrive, select the file, open **Details**, and copy the **Path** (if available). <br> - If **Path** isn’t shown, open the file, go to **File** > **Info**, then select **Copy path**. |[Test-DlpPolices](/purview/dlp-test-dlp-policies)|[Information Protection diagnostics](https://purview.microsoft.com/informationprotection/diagnostics)|
64
68
| A DLP rule isn't enforced for a particular user. Is this user included in the DLP policy? | Checks which DLP policies apply to a user. Diagnostic results include the policy names and where the policies apply.|[Get-DlpCompliancePolicy](/powershell/module/exchangepowershell/get-dlpcompliancepolicy) <br> [Get-DlpComplianceRule](/powershell/module/exchangepowershell/get-dlpcompliancerule)|[DLP diagnostics](https://purview.microsoft.com/datalossprevention/diagnostics)|
65
-
| Endpoint DLP isn’t working as expected. Are there any issues with policy sync on the device? | Check for policy sync issues and provide recommendations on how to resolve them. |[Get-DlpCompliancePolicy](/powershell/module/exchangepowershell/get-dlpcompliancepolicy)|[DLP diagnostics](https://purview.microsoft.com/datalossprevention/diagnostics)|
66
-
| Alerts not working for a DLP rule. Are there any issues with the DLP rule configuration? | Check for alerts and identify whether there are issues with the DLP rule configuration.|[Get-DlpCompliancePolicy](/powershell/module/exchangepowershell/get-dlpcompliancepolicy) <br> [Get-DlpComplianceRule](/powershell/module/exchangepowershell/get-dlpcompliancerule)|[DLP diagnostics](https://purview.microsoft.com/datalossprevention/diagnostics)|
67
-
| Can't find an alert for an activity or an audit event ? | Check for the alert related to an activity or audit event and investigate why the alert could be missing |[Get-DlpCompliancePolicy](/powershell/module/exchangepowershell/get-dlpcompliancepolicy) <br> [Get-DlpComplianceRule](/powershell/module/exchangepowershell/get-dlpcompliancerule)|[DLP diagnostics](https://purview.microsoft.com/datalossprevention/diagnostics)|
69
+
| Endpoint DLP isn’t working as expected. Are there any issues that affect policy sync on the device? | Check for policy sync issues, and provide recommendations for how to resolve them. |[Get-DlpCompliancePolicy](/powershell/module/exchangepowershell/get-dlpcompliancepolicy)|[DLP diagnostics](https://purview.microsoft.com/datalossprevention/diagnostics)|
70
+
| Alerts aren't working for a DLP rule. Are there any issues that affect the DLP rule configuration? | Check for alerts, and determine whether any issues affect the DLP rule configuration.|[Get-DlpCompliancePolicy](/powershell/module/exchangepowershell/get-dlpcompliancepolicy) <br> [Get-DlpComplianceRule](/powershell/module/exchangepowershell/get-dlpcompliancerule)|[DLP diagnostics](https://purview.microsoft.com/datalossprevention/diagnostics)|
71
+
| Can't find an alert for an activity or an audit event. | Check for the alert related to an activity or audit event, and investigate why the alert could be missing. |[Get-DlpCompliancePolicy](/powershell/module/exchangepowershell/get-dlpcompliancepolicy) <br> [Get-DlpComplianceRule](/powershell/module/exchangepowershell/get-dlpcompliancerule)|[DLP diagnostics](https://purview.microsoft.com/datalossprevention/diagnostics)|
72
+
| A DLP rule isn’t triggering for a file stored in SharePoint or OneDrive. Is the file evaluated by DLP, and is it in scope for the policy? | Check a file's properties and classification to review whether a DLP rule matched or didn't match. When entering the file path, make sure that you provide the full file path, not a sharing link. <br> <br> Tips for finding the correct path: <br> - In SharePoint or OneDrive, select the file, open Details, and copy the Path (if available). <br> - If **Path** isn’t shown, open the file, go to File > Info, then select **Copy path**. |[Test-DlpPolices](/purview/dlp-test-dlp-policies)|[DLP diagnostics](https://purview.microsoft.com/datalossprevention/diagnostics)|
73
+
| Policy tips don't appear in Outlook on the web. Are there issues that affect the DLP policy tips configuration? |[Analyzes the HTTP Archive (HAR) file](../data-loss-prevention/diagnose-dlp-policy-tip-display-issues.md) to investigate why policy tips don't appear in Outlook on the web. <br> <br> Steps for finding and exporting the HAR file: <br> - Open Outlook on the web, and press F12 to open Developer Tools. <br> - Select the **Network** tab, select **Preserve log**, reproduce the issue, and export the HAR file. |[Test-DlpPolices](/purview/dlp-test-dlp-policies)|[DLP diagnostics](https://purview.microsoft.com/datalossprevention/diagnostics)|
68
74
69
75
## Diagnostics on the Help pane
70
76
71
-
The diagnostics on the **Help** pane cover the following areas in Microsoft Purview:
77
+
The diagnostics in the **Help** pane cover the following areas in Microsoft Purview:
72
78
73
79
- Archive mailboxes
74
80
- Mailbox retention
@@ -79,7 +85,7 @@ The diagnostics on the **Help** pane cover the following areas in Microsoft Purv
79
85
- DLP policies
80
86
81
87
> [!NOTE]
82
-
> Diagnostics on the **Help** pane aren't available in the following environments: GCC High, DoD, and Microsoft 365 operated by 21Vianet.
88
+
> Diagnostics in the **Help** pane aren't available in the following environments: GCC High, DoD, and Microsoft 365 operated by 21Vianet.
83
89
84
90
### Find diagnostics through the Help menu
85
91
@@ -101,9 +107,9 @@ You can search for diagnostics by using the **Help** menu in the Microsoft Purvi
101
107
102
108
1. Sign in to the [Microsoft Purview portal](https://purview.microsoft.com/) as an administrator.
103
109
104
-
2. Select the **Help** icon in the upper-right corner of the portal to open the **Help and support** pane.
110
+
2.Open the **Help and support** pane: Select the **Help** icon in the upper-right corner of the portal.
105
111
106
-
3. In the **Help and support** pane, select **Ask a question** to open the **Help** pane.
112
+
3.Open the **Help** pane: In the **Help and support** pane, select **Ask a question**.
107
113
108
114
4. In the search box, enter a brief description of the issue that you want to resolve.
0 commit comments