Unable to Activate Microsoft Office or Windows Products Through Edge SWG or Advanced Secure Gateway

Products

• ProxySG Software - SGOS

Issue/Introduction

Attempts to activate Microsoft Office or Windows Products through a Edge SWG or Advanced Secure Gateway fail.

Cause

The servers involved in the activation are signed by an untrusted certificate authority.

A policy trace shows the following:

  POST https://activation.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=o14

  user: unauthenticated
  authentication status='not_attempted' authorization status='not_attempted'
  EXCEPTION(ssl_domain_invalid): Request could not be handled
  url.category: Technology/Internet@Blue Coat
  server.certficate.hostname.category: Technology/Internet@Blue Coat

Resolution

To resolve the issue:

1. Create a new rule in an SSL Access Layer.
2. Set the Destination to a Request URL, simple match "activation.sls.microsoft.com".
3. Create a new object in the Action field.
4. Select Server Certificate Validation, and then select the Disable server certificate validation option.
5. Copy the rule. In the new rule, set the Destination to "validation.sls.microsoft.com".

See the following example:

Additional Information

Additional HTTPS URLs used in Microsoft product Activation:

• https://go.microsoft.com/
• https://login.live.com
• https://activation.sls.microsoft.com/
• https://validation.sls.microsoft.com/
• https://activation-v2.sls.microsoft.com/
• https://validation-v2.sls.microsoft.com/
• https://displaycatalog.mp.microsoft.com/
• https://licensing.mp.microsoft.com/
• https://purchase.mp.microsoft.com/
• https://displaycatalog.md.mp.microsoft.com/
• https://licensing.md.mp.microsoft.com/
• https://purchase.md.mp.microsoft.com/