Get-ADFSCertificate

Gets the certificates that are in the Federation Service.

Syntax

Get-ADFSCertificate
   [[-CertificateType] <String[]>]
   [<CommonParameters>]
Get-ADFSCertificate
   [-Thumbprint] <String[]>
   [<CommonParameters>]

Description

The Get-ADFSCertificate cmdlet retrieves the certificates that the Federation Service uses for token signing, token decrypting, card signing and securing service communications.

Examples

-------------------------- EXAMPLE 1 --------------------------

C:\PS>Get-ADFSCertificate -CertificateType "Token-Signing"

Description


Gets the token-signing certificates for the Federation Service.

Parameters

-CertificateType

Specifies the type of the certificate to retrieve. Possible certificate types include the following:

Token-Signing, Token-Encryption, Service-Communications, or Infocard-Signing.

Type:String[]
Accepted values:Service-Communications, Token-Decrypting, Token-Signing
Position:0
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Thumbprint

Specifies the thumbprint of the certificate to retrieve.

Type:String[]
Position:0
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

Inputs

None

Outputs

Microsoft.IdentityServer.PowerShell.Resources.ServiceCertificate

A class structure that represents the certificate objects for the Federation Service.

Notes

  • You can use the Get-ADFSCertificate cmdlet without any parameters to get all the certificates.