TLS 1.2 in Azure Function connecting to Dynamics 365

July 2017 update for Dynamics 365 (online) requires connections to customer engagement applications to utilize TLS 1.2 (or better) security.

If you are connecting to July 2017 update for Dynamics 365 (online) from an Azure Function using Xrm Tooling dlls, you may experience error being returned, "Unable to login to dynamics crm ...". This is because the .NET Framework version of Azure Function (C#) is 4.6.1, and by default it doesn't use TLS 1.2.

To fix this, just add ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12; before you initialize the CrmServiceClient object.

using System;
using System.Configuration;
using System.Net;
using Microsoft.Azure.WebJobs;
using Microsoft.Azure.WebJobs.Host;
using Microsoft.ServiceBus.Messaging;
using Microsoft.Xrm.Tooling.Connector;


namespace GymSports.Azure.Integration
{
    public static class Contacts
    {
        [FunctionName("Contacts")]
        public static void Run([ServiceBusTrigger("contacts", AccessRights.Listen, Connection = "Integration_Receiver_SERVICEBUS")]string myQueueItem, TraceWriter log)
        {
            try
            {
                ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;
               
                CrmServiceClient crmSvc = new CrmServiceClient(ConfigurationManager.ConnectionStrings["crmConn"].ConnectionString);

                if (crmSvc != null && crmSvc.IsReady)
                {
                    log.Info($"Connected to CRM instance {crmSvc.ConnectedOrgFriendlyName}.");
                }
                else
                    log.Info(crmSvc.LastCrmError + " ... " + crmSvc.LastCrmException);
            }
            catch(Exception ex)
            {
                log.Info(ex.ToString());
            }
        }
    }
}

Comments

Post a Comment

Popular posts from this blog

Dynamics 365 sub-grid add new and add existing

Image
In Dynamics 365, if you put a sub-grid to display related records in a parent, there is always a plus (+) sign to allow user either adding a new child record or an existing record. The default behavior when user clicks the plus (+) sign is to display a lookup box, user can then click the lookup to drop down a list of child records or click the New button at the bottom of the drop down list. However, sometimes we may want to force the plus (+) sign to open the new record form straight away without displaying the lookup drop down to users. For example, we have a parent entity called Project, which is a custom entity. And we create a second custom entity called Service Contract, which has N to 1 relationship to Project. The project form looks like below. For the purpose of the demo, we say the requirement is to always open the new service contract form when user clicks the plus (+) sign. The easiest way to do this is to change the Project lookup field in the Service Con...
Read more

Dynamics 365 Web API get entity using alternate key value that has apostrophe/single quote in it

In Dynamics 365, you can create alternate key for an entity using one of the attributes. Entity can be retrieved using alternate key via Web API. This MSDN article gives you an example on how to do that:  https://msdn.microsoft.com/en-us/library/mt607871.aspx#BKMK_UsingAltKeys I had an interesting error today when performing a query using alternate key. I tried to get an entity record from the User entity (systemusers) using an alternate key that is configured in the User entity. The alternate key uses the internalemailaddress attribute, which contains users' email addresses. A user's email address is firstname.O'lastname@domain.com, and as you can see, there is an apostrophe/single quote in the email address. When performing the query via Web API to get the user record, you can construct the below Url and simply paste into the browse to see the JSON response. In this case, the Url is: https://organization.crm6.dynamics.com/api/data/v8.2/systemusers(internalemailadd...
Read more

TLS 1.2 and PowerShell

To view security protocol that your PowerShell currently uses, use the below command: [Net.ServicePointManager]::SecurityProtocol By default, PowerShell doesn't use TLS 1.2. This causes some problems if you use PowerShell a lot to work with Dynamics 365 and other popular SaaS applications, due to more and more applications are now forcing TLS 1.2 for incoming connections. Taking Dynamics 365 as an example, you may now keep getting the error message "More then one org was returned, retry with an exact org name" when using Get-CrmConnection PowerShell command. This is due to Dynamics 365 now only accepts TLS 1.2 connections, and your PowerShell is not forcing that. To work around it, put the below PowerShell command before making the connection: [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12; Just like doing the same in C# code to force the connection to use TLS 1.2, but this is in PowerShell. The Get-CrmConnection ...
Read more