eDiscovery Export Download Failing

Question

eDiscovery Export Download Failing

Ross Mills 0 Microsoft Employee

When attempting to download files from an eDiscovery export the files fail to download. Seems to be a SSL issue?

(index):1 Unsafe attempt to load URL https://gccm.proxyservice.ediscovery.gcc.svc.cloud.microsoft/ediscovery/api/proxy/exportaedblob(...) from frame with URL chrome-error://chromewebdata/. Domains, protocols and ports must match.

This happens both within Purview admin console as well as using Graph api for export.

Manoj Kumar Boyini 11,440 Reputation points Microsoft External Staff Moderator

2026-04-09T00:31:34.8666667+00:00

Hi @Ross Mills

The error you’re seeing indicates that the browser is blocking the export download during the handoff phase, rather than an issue with the eDiscovery export itself. In GCC environments, export files are delivered through a secure endpoint such as *.proxyservice.ediscovery.gcc.svc.cloud.microsoft, and if the browser cannot complete the authenticated session with this endpoint, it may block the request and show this error.

This is typically caused by browser or network conditions, such as blocked pop-ups or automatic downloads, restricted cookies, strict tracking prevention settings, or interference from a corporate proxy/firewall (including SSL inspection).

To resolve this, please try using the latest Microsoft Edge (recommended), ensure pop-ups and automatic downloads are allowed, enable first- and third-party cookies, and set tracking prevention to Balanced or allow the site. Additionally, verify that the required endpoints are allowlisted and not being intercepted by your network.

If you are using Graph API, ensure the export has completed and use the exportFileMetadata.downloadUrl to download the file directly (outside the browser), which bypasses browser-related restrictions.

Hope this helps, Please let us know if you have any questions and concerns.
Ross Mills 0 Reputation points Microsoft Employee

2026-04-09T10:58:41.0366667+00:00

Thanks for the quick response!

When using Graph API, we get this error too though:

Exception: { "errorType": "System.Net.Http.HttpRequestException", "errorMessage": "The SSL connection could not be established, see inner exception.",...

{ "errorType": "System.Security.Authentication.AuthenticationException", "errorMessage": "The remote certificate is invalid according to the validation procedure: RemoteCertificateNameMismatch",

This only seems to happen in GCC. We have this same code running in other Azure cloud environments and it works just fine.