SharePoint – Cannot open Office documents in Client

The Issue:

We are not able to open office documents in a new web application. We get the following error: "Sorry we cannot open 'URL.xxx document'"

What we see in the Logs:

• Below is what we saw in IIS for the working scenario:

 

[DATE] 21:58:09 s-ip OPTIONS /SiteCollection/Shared+Documents/ - 443 - c-ip Microsoft+Office+Word+2013 401 0 0 64
[DATE] 21:58:59 s-ip OPTIONS /SiteCollection/Shared+Documents/ - 443 - c-ip Microsoft+Office+Word+2013 401 1 2148074254 2
[DATE] 21:58:59 s-ip OPTIONS /SiteCollection/Shared+Documents/ - 443 domain\user c-ip Microsoft+Office+Word+2013 200 0 0 80
[DATE] 21:58:59 s-ip POST /SiteCollection/_vti_bin/cellstorage.svc/CellStorageService - 443 - c-ip Microsoft+Office+Word+2013 401 1 2148074254 11
[DATE] 21:58:59 s-ip POST /_vti_bin/cellstorage.https.svc/cellstorageservice - 443 domain\user c-ip Microsoft+Office+Word+2013 200 0 0 607
[DATE] 21:59:01 s-ip POST /_vti_bin/cellstorage.https.svc/cellstorageservice - 443 domain\user c-ip Microsoft+Office+Word+2013 200 0 0 834

• Below is what we saw in IIS for the non-working scenario:

 

[DATE] 22:07:53 s-ip OPTIONS /sites/SiteCollection/Shared+Documents/ - 443 - c-ip Microsoft+Office+Word+2013+(15.0.4517)+Windows+NT+6.2 500 0 64 2
[DATE] 22:07:53 s-ip OPTIONS /sites/SiteCollection/Shared+Documents/ - 443 - c-ip Microsoft+Office+Word+2013+(15.0.4517)+Windows+NT+6.2 403 16 2148204809 17
[DATE] 22:07:53 s-ip OPTIONS /sites/SiteCollection/Shared+Documents/ - 443 - c-ip Microsoft+Office+Word+2013+(15.0.4517)+Windows+NT+6.2 403 16 2148204809 15
[DATE] 22:07:53 s-ip HEAD /sites/SiteCollection/Shared+Documents/BrokenDocument.docx - 443 - c-ip Microsoft+Office+Word+2013+(15.0.4517)+Windows+NT+6.2 403 16 2148204809 15
[DATE] 22:07:53 s-ip GET /sites/SiteCollection/Shared+Documents/BrokenDocument.docx - 443 - c-ip Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.2;+Win64;+x64;+Trident/6.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+.NET+CLR+2.0.50727;+InfoPath.3;+ms-office;+MSOffice+15) 403 16 2148204809 57

 

• The OPTIONS request never gets authenticated in the non-working scenario.
• We captured failed request tracing logs for 403 and 500 and below is what we saw:

 

This is for the 500:

 

20. NOTIFY_MODULE_START ModuleName="IsapiFilterModule", Notification="MAP_PATH", fIsPostNotification="false" 22:25:29.868
21. NOTIFY_MODULE_END ModuleName="IsapiFilterModule", Notification="MAP_PATH", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE" 22:25:29.868
22. MODULE_SET_RESPONSE_ERROR_STATUS
Warning ModuleName="IIS Web Core", Notification="BEGIN_REQUEST", HttpStatus="500", HttpReason="Internal Server Error", HttpSubStatus="0", ErrorCode="The I/O operation has been aborted because of either a thread exit or an application request.
(0x800703e3)", ConfigExceptionInfo="" 22:25:29.868

 

This is for the 403:

 

20. NOTIFY_MODULE_START ModuleName="IsapiFilterModule", Notification="MAP_PATH", fIsPostNotification="false" 22:25:29.913
21. NOTIFY_MODULE_END ModuleName="IsapiFilterModule", Notification="MAP_PATH", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE" 22:25:29.913
22. MODULE_SET_RESPONSE_ERROR_STATUS
Warning ModuleName="IIS Web Core", Notification="BEGIN_REQUEST", HttpStatus="403", HttpReason="Forbidden", HttpSubStatus="16", ErrorCode="A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
(0x800b0109)",
ConfigExceptionInfo="" 22:25:29.928

 

• The 403 Errors were for client certificates.

 

 

How do we fix this?

 

• We made this change on the affected site:

 

IIS > Site > SSL Settings > Client Certificates > Set this to Ignore [this was set to Accept on the affected site].

 

• As soon as we made this change, Office documents from the affected site opened up in Office Client.