Unknown Error while communicating with O365 BEC Web Service

Question

Hi Guys,
When I try to add a new mail user in O365 Exchange, one strange error is thrown.
Are any guys  kind enough to help me ?
Here is the script and the error.
PS C:\Users\o365-user> $cred = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList
'[email protected]', $(ConvertTo-SecureString -String '*******' -AsPlainText -Force)
PS C:\Users\o365-user> $session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri 'https:
//ps.outlook.com/powershell/' -Credential $cred -Authentication Basic -AllowRedirection
WARNING: Your connection has been redirected to the following URI:
"https://pod51053psh.outlook.com/powershell-liveid?PSVersion=4.0 "
PS C:\Users\o365-user> Import-PSSession $session
WARNING: The names of some imported commands from the module 'tmp_zkc5sid4.gpq' include unapproved verbs that might
make them less discoverable. To find the commands with unapproved verbs, run the Import-Module command again with the
Verbose parameter. For a list of approved verbs, type Get-Verb.
ModuleType Version Name ExportedCommands
Script 1.0 tmp_zkc5sid4.gpq {Add-AvailabilityAddressSpace, Add-DistributionGroupMember...
PS C:\Users\o365-user> $users=Get-MailUser
PS C:\Users\o365-user> New-MailUser -Name '[email protected]' -DisplayName 'Test LIU'
-MicrosoftOnlineServicesID '[email protected]' -Password $(ConvertTo-SecureString -String '*****' -AsPlainText -Force)
Unknown Error while communicating with O365 BEC Web Service (Exception type
"Microsoft.Exchange.Management.BecWebService.CouldNotCreateBecSyncServiceException", message=
"Microsoft.Exchange.Management.BecWebService.CouldNotCreateBecSyncServiceException: Couldn't create BEC Web Service:
The matching certificate for certificateSubject CN=ExoProvToO365.outlook.com, OU=Microsoft Corporation, O=Microsoft
Corporation, L=Redmond, S=WA, C=US couldn't be found.
Parameter name: certificateSubject ---> System.ArgumentException: The matching certificate for certificateSubject
CN=ExoProvToO365.outlook.com, OU=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=WA, C=US couldn't be
found.
Parameter name: certificateSubject
at Microsoft.Exchange.Security.Cryptography.X509Certificates.TlsCertificateInfo.FindFirstCertWithSubjectDistinguishe
dName(String certificateSubject, Boolean checkForValid)
at Microsoft.Exchange.Management.BecWebService.BecWebServiceHelper.CreateService(Uri url)
--- End of inner exception stack trace ---
at Microsoft.Exchange.Management.BecWebService.BecWebServiceHelper.InvokeWithRetry[TResponse](Action operation)
at Microsoft.Exchange.Management.BecWebService.BecWebServiceHelper.GetUserByUpn(GetUserByUpnRequest request)
at Microsoft.Exchange.ProvisioningAgent.BecWebServiceLiveIdManager.GetMemberType(SmtpAddress memberName)", inner
message "System.ArgumentException: The matching certificate for certificateSubject CN=ExoProvToO365.outlook.com,
OU=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=WA, C=US couldn't be found.
Parameter name: certificateSubject
at Microsoft.Exchange.Security.Cryptography.X509Certificates.TlsCertificateInfo.FindFirstCertWithSubjectDistinguishe
dName(String certificateSubject, Boolean checkForValid)
at Microsoft.Exchange.Management.BecWebService.BecWebServiceHelper.CreateService(Uri url)")
+ CategoryInfo : NotSpecified: (0:Int32) [New-MailUser], RecipientTaskException
+ FullyQualifiedErrorId : [Server=SG2PR01MB0540,RequestId=d97a193e-91a7-4430-ac64-6b7003f5b9b0,TimeStamp=4/23/2015
9:37:58 AM] [FailureCategory=Cmdlet-RecipientTaskException] 3F9FDA25,Microsoft.Exchange.Management.RecipientTasks
.NewMailUser
+ PSComputerName : pod51053psh.outlook.com
PS C:\Users\o365-user> New-ManagementRoleAssignment -Role 'ApplicationImpersonation' -User 'test1_1@smokeazu
rebeta5.onmicrosoft.com'
Couldn't find a user with the identity "[email protected]".
+ CategoryInfo : NotSpecified: (:) [New-ManagementRoleAssignment], ManagementObjectNotFoundException
+ FullyQualifiedErrorId : [Server=SG2PR01MB0540,RequestId=88777637-298d-4bb1-972f-b61161566a57,TimeStamp=4/23/2015
9:37:59 AM] [FailureCategory=Cmdlet-ManagementObjectNotFoundException] 921A76AD,Microsoft.Exchange.Management.Rba
cTasks.NewManagementRoleAssignment
+ PSComputerName : pod51053psh.outlook.com
PS C:\Users\o365-user> New-ManagementRoleAssignment -Role 'Mailbox Search' -User '[email protected]
microsoft.com'
Couldn't find a user with the identity "[email protected]".
+ CategoryInfo : NotSpecified: (:) [New-ManagementRoleAssignment], ManagementObjectNotFoundException
+ FullyQualifiedErrorId : [Server=SG2PR01MB0540,RequestId=2b64d3a2-97da-4de5-be8c-00ad73452456,TimeStamp=4/23/2015
9:38:00 AM] [FailureCategory=Cmdlet-ManagementObjectNotFoundException] 921A76AD,Microsoft.Exchange.Management.Rba
cTasks.NewManagementRoleAssignment
+ PSComputerName : pod51053psh.outlook.com
PS C:\Users\o365-user> Remove-PSSession $session
PS C:\Users\o365-user>
Thanks
Budlion LIU

Answer 1

Hello,
Or you can also ask on Exchange Online Forum:
https://social.technet.microsoft.com/Forums/msonline/en-US/home?forum=onlineservicesexchange
Thanks,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Simon Wu
TechNet Community Support