Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. "Workplace Join discovery failed" with exit code 0x80072F0D

"Workplace Join discovery failed" with exit code 0x80072F0D

View products that this article applies to.

Symptoms

When a user tries to perform a Workplace Join operation, she receives the following error message:

Confirm you are using the current sign-in info, and that your workplace uses this feature. Also, the connection to your workplace might not be working right now. Please wait and try again.

Additionally, an administrator may see the following event details in Event Viewer:

Event ID:102
Log Name:Microsoft-Windows-Workplace Join/Admin
Source:Microsoft-Windows-Workplace Join
Level:Error
Description:Workplace Join discovery failed.

Exit Code: 0x80072F0D.

The certificate authority is invalid or incorrect. Could not connect to 'https://EnterpriseRegistration.domain.com:443/EnrollmentServer/contract?api-version=1.0'.

↑ Back to the top

Cause

This problem occurs because the DRS Service SSL certificate or a certificate in the issuance chain cannot be verified to a trusted issuer.

↑ Back to the top

Resolution

To resolve this problem, update the root certificates, and verify the issuer.

Update the root certificates

To update the root certificates, run Microsoft Update, and then make sure that the updates for root certificates are all installed.

Verify the issuer

Examine each certificate in the SSL certificate chain, and make sure that the issuer can be verified:
  1. Download the certificate to your local hard disk.
  2. Open a command prompt, and then run the following command:

    certutil -f -urlfetch -verify location_of_certificate
    Note The location_of_certificate placeholder represents the place where you downloaded the certificate, as in the following example:

    certutil -f -urlfetch -verify C:\temp\enterpriseregistration.contoso.com.crt

↑ Back to the top

References

For more troubleshooting information, see the following article in the Microsoft Knowledge Base:

3045377 Diagnostic logging for troubleshooting Workplace Join issues
For additional troubleshooting specific to this problem, filter for Capi2 events 81, 11, and 30.

↑ Back to the top

Keywords: vkbportal343, kbexpertiseadvanced, kbsurveynew, kbtshoot, azuread, kb

↑ Back to the top

Article Info
Article ID : 3045382
Revision : 4
Created on : 10/9/2018
Published on : 10/9/2018
Exists online : False
Views : 790