Set-AdfsSslCertificate

Sets an SSL certificate for HTTPS bindings for AD FS.

Syntax

Set-AdfsSslCertificate
   [-Confirm]
   [-Force <Boolean>]
   [-Member <String[]>]
   -Thumbprint <String>
   [-WhatIf]
   [<CommonParameters>]

Description

The Set-AdfsSslCertificate cmdlet sets an SSL certificate for HTTPS bindings for Active Directory Federation Services (AD FS). Use this cmdlet to change the SSL certificate associated with the AD FS service. You must run this cmdlet on each AD FS server in the AD FS farm.

Use this cmdlet to change the deployment from one in which both user certificate authentication and device certificate authentication use port 443, to one in which user certificate authentication uses a non-standard port. Specify a new certificate that does not contain a Subject Alternative Name (SAN) for certauth.<federation service name>, as in certauth.contoso.com.

Examples

Example 1: Set a certificate

PS C:\> Set-AdfsSslCertificate -Thumbprint "FC85DDB0FC58E63D8CB52654F22E4BE7900FE349"

This command sets the specified certificate for HTTPS bindings for AD FS.

Required Parameters

-Thumbprint

Specifies the thumbprint of a certificate. The thumbprint that you specify corresponds to the certificate installed on the federation server in the local store.

Type:String
Position:Named
Default value:None
Accept pipeline input:True (ByValue)
Accept wildcard characters:False

Optional Parameters

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:False
Accept pipeline input:False
Accept wildcard characters:False
-Force
Type:Boolean
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Member
Type:String[]
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:False
Accept pipeline input:False
Accept wildcard characters:False

Outputs

System.Object