Who are Impacted
Customers who are still using their Delegate accounts in TMCAS for Microsoft Exchange Online.
Details
Previously, customers could use either an Authorized account or a Delegate account to protect Exchange Online in TMCAS. An Authorized account can get an access token using modern authentication, while a Delegate account uses basic authentication to access Exchange Online.
Once Microsoft disables basic authentication, TMCAS will not be able to access Exchange Online if customers are still using their Delegate account.
Trend Micro has implemented a feature to migrate Delegate accounts to an Authorized account on the TMCAS management console.
Recommended Action
Customers who are still using a Delegate account in TMCAS should migrate to an Authorized account as soon as possible.
For detailed steps on how to migrate to a Delegate account, please refer to the Online Help article: Migrating to Use Authorized Account for Exchange Online.
Frequently Asked Questions
Logon to Trend Micro Cloud App Security management console, go to
Administration >
Service Accounts, check the Status column for Exchange Online Service Type. If you can see “Recreate Access token” in the field, it means you are using an Authorized account, not a Delegate account.
During migration, Exchange Online is still protected via basic authentication. Once the migration is completed, TMCAS will use token-based authentication to provide protection to Exchange Online.
It could take several hours. It is difficult to estimate the exact time because it depends on the number of users, the network environment and the activities in Exchange Online. The message Migrating to use token authentication for Exchange Online will appear in the Tasks list at the top right corner of the management console during migration. If the migration doesn’t complete within 24 hours, contact Trend Micro Technical support with your Trend Micro Cloud App Security account information.
Click Retry and check if the migration can be completed. If the migration still fails, contact Trend Micro Technical support with your TMCAS account information.
No, you don’t have to, because the Microsoft announcement is only for Exchange Online. Migrating your Delegate account for other services is not necessary as of this writing.
