Word for Android tablets Excel for Android tablets PowerPoint for Android tablets Excel for Android phones Office for business PowerPoint for Android phones Word for Android phones More...Less

Note:Office for Android is now available for all Chromebooks that support Android apps and can be downloaded from the Play store or the App store.

PROBLEM

After you install Office Mobile on an Android device and authenticate the app by using your Org ID or your federated ID, you receive the following error message:

Can't connect to the server

Your device might be missing the required security certificates for this server. Please contact your admin or ask the Microsoft community at http://answers.microsoft.com for help with installing the certificates.

Can't connect to the server error

SOLUTION

To resolve this issue, install the correct trusted certificate. To do this, follow these steps:

Step 1: Determine which certificates are missing

  1. On a Windows-based computer, start Firefox or Chrome (Microsoft Internet Explorer and Edge don't allow you to export/save certificates).

  2. In the address bar, enter a URL that points to the HTTPS endpoint for authentication that contains the certificate that you must install on your Android device. For example, these would be similar tohttps://login.microsoftonline.com/ (Microsoft 365 cloud endpoint) and the federated server endpointhttps://sts. contoso .com/ (on-premise federation server, if there are any).

    Note:In Microsoft OfficeHub, the authentication request gets redirected before it reaches the company servers. Therefore, you may have to try several devices to find the one that can successfully authenticate to the URL that you enter.

  3. After you reach the secure website, a small lock icon should appear in the address bar. Click the lock icon in the address bar.

    Address bar with lock icon

  4. At the bottom of the small message window that opens, click theCertificate link.

  5. In the Certificate window, go toCertificate Path to see all the certificates that are in use to create an SSL connection to the given server.

Step 2: Follow these steps to obtain the required certificates

For each certificate:

  1. On theCertificate Path tab, click the required certificate in the list.

    Selecting required certificate under Certificate Path

  2. ClickView Certificate.

  3. On theDetail tab, click theCopy to File option. TheCertificate Export Wizard opens. To start the exporting process, clickNext.

  4. Under "Select the format you want to use," selectDER encoded binary x.509 (.CER) orBase-64 encoded X.509 (.CER).

    Select Certificate export format

  5. ClickNext, type a file name, and then select a location in which to save the file.

  6. ClickNext, and then clickFinish.

Step 3: Obtain the intermediate certificate authority certificate

For each certificate:

If customer is using a federated ID to authenticate, we need one of the intermediate certificates from the STS website.

  1. On a Windows PC, press Win+R  (Windows key + R), typecertmgr.msc in theRun dialog, and then press Enter.

  2. ExpandTrusted Root Certification Authorities -> Certificates.

  3. Right-clickCertificates and then selectAll Tasks -> Import.

  4. Import the certificates that you obtained in Step 2. (If federated, both certificates must be imported on the Windows computer.)

  5. In the certmfr.msc, expandIntermediate Certification Authorities.

  6. ClickCertificates. Here, you should find the certificates with the name "Microsoft IT SSL SHA2". You may also see certificates that are specific to the issuer or federation.

  7. Right-click on each of the above certificates, clickAll Tasks -> Export and follow the export wizard to export the certificate to a (Base 64) .cer file.

Step 4: Install the certificate

For each certificate:

  1. Copy the certificate files to your device.

  2. On your device, go toSettings, tapPersonal, tapSecurity, and then tapInstall from Storage.

  3. Select the certificate that you must have, and then tapOK. (In total, four certificates should be installed—two root certificates in Step 2 and two intermediate certificates in Step 3.)

  4. To verify that the certificate is installed, go toSettings, tapPersonal, tapSecurity, tapTrusted Credentials, and then tapUser.

    Important:All user installed certificates are listed here. If a certificate is not found underTrusted credentials - > User, that certificate must be reinstalled.

MORE INFORMATION

This issue occurs because the device doesn't have a trusted certificate installed.

Still need help? Go to Microsoft Community.

Need more help?