Certificate-dependent connector configuration: Make sure that your on-premises email server is configured to make use of a certificate to ship email to Microsoft 365, and the Popular-Identify (CN) or Subject matter Alternate Name (SAN) within the certificate is made up of a domain identify you have registered in Microsoft 365, https://www.hostscheap.com/google-cloud-install-service