Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
| Enabled for | Public preview | General availability |
|---|---|---|
| Users, automatically | - | 
Apr 1, 2025 |
Business value
This feature enhances the security of HTTP calls in your AL applications by validating all server certificates for outgoing web service calls. When you enable certificate validation by default, you get a higher level of trust and security in your communications. If needed, you can disable certificate validation for specific calls. A new telemetry event helps you debug failures. By providing robust security measures and debugging tools, this feature protects your business from potential security threats and ensures smooth, secure operations.
Feature details
To enhance the security of HTTP calls from AL, the AL runtime now validates all server certificates when you call a web service endpoint with the HttpClient data type. Certificate validation is on by default. A server certificate is on the endpoint side. It's not the certificate you attach to a request in AL.
If an app or per-tenant extension needs to turn off certificate validation, add the new property to the HttpClient data type. AL code can turn off server certificate validation for the outgoing web service call.
If the publisher of an app or per-tenant extension needs to debug failing HTTP calls because server certificates can't be validated, add the new telemetry event. The event happens when certificate validation fails.
App and per-tenant extension publishers can disable certificate validation by using a feature management key. In version 27, certificate validation is always on and you can't disable it.
Geographic areas
Visit the Explore Feature Geography report for Microsoft Azure areas where this feature is planned or available.
Language availability
Visit the Explore Feature Language report for information on this feature's availability.
Tell us what you think
Help us improve Dynamics 365 Business Central by discussing ideas, providing suggestions, and giving feedback. Use the forum at https://aka.ms/bcideas.
Additional resources
HttpClient.UseServerCertificateValidation(Boolean) Method (docs)