ARM Exchange online integration - "Error: No certificate found for the specified thumbprint"

Generated and uploaded the certificate as described in the documentation, but the configuration keeps telling that there's no certificate for the thumbprint.

For Exchange Online in ARM, please check these items in this order:

• The certificate must be available in Local Computer\Personal on the ARM server and the assigned collector that runs the scan, not only under CurrentUser\My.
• The thumbprint entered in ARM must exactly match the certificate that was uploaded to the Entra app and installed on the scan machine. 
• Exchange Online should use a dedicated app registration and not reuse the Azure AD / Teams / OneDrive / SharePoint app registration. 
• The Organization value must be the tenant in *.onmicrosoft.com format. 

The fastest validation is to run this on the same collector/server that ARM uses for the Exchange Online scan: 

Plain Text

Connect-ExchangeOnline -CertificateThumbPrint "YOUR_THUMBPRINT" -AppID "YOUR_APP_ID" -Organization "yourtenant.onmicrosoft.com"

If that returns the same “No certificate found for the specified thumbprint” error, the issue is almost certainly the local certificate store placement on that machine, not the ARM UI itself.

If you get Unauthorized while running the code, follow the Microsoft article below.

App-only authentication in Exchange Online PowerShell and Security & Compliance PowerShell | Micros…

• As you have already created the AppID you can continue to Step 2: Assign API permissions to the application.
• Then continue the steps up to the end, skipping Option 2 in Step 5.