You need to run both. The Set-AdfsSslCertificate
and the Set-AdfsCertificate -CertificateType "Service-Communications"
.
Setting new SSL certificate on ADFS/WAP environment - Get-adfsCertificate shows old service-communication thumbprint
I'm updating the SSL cert on my ADFS/WAP build and unsure if what I'm seeing is typical behaviour. I'm using the following two commands to update the certificate:
Set-AdfsSslCertificate -Thumbprint 'CKJHASFD87Y98729I4UQHKJHAWFD98ASDF'
Set-AdfsAlternateTlsClientBinding -Thumbprint 'CKJHASFD87Y98729I4UQHKJHAWFD98ASDF'
restarting ADFS service
Running Get-AdfsSslCertificate shows all ports using the new thumbprint
Running Get-AdfsCertificate show that the Service-Communications certificate thumbprint is still the old one
I've noted on a blog that Set-AdfsSslCertificate is the one I should be using rather than Set-AdfsCertificate but on looking up the details for Set-AdfsCertificate it shows how I can specify the CertificateType as Service-Communications so I'm unsure if I've just missed that step.
any advise on the process?
-
Pierre Audonnet - MSFT 10,166 Reputation points Microsoft Employee
2022-05-22T20:29:39+00:00
1 additional answer
Sort by: Oldest
-
DaveK 1,846 Reputation points
2022-05-22T20:46:33.983+00:00 Many thanks for that.
I ended up just trying a few things as they are VM's so could restore every time something didn't work. Turns out there was a bunch of things which I wasn't aware based on into I was given from someone else at work, various things have forced me to dig deeper into documentation myself so its been a interesting task, after working yesterday afternoon I'm left with 2 ADFS servers and 2 WAP servers, all communicating as expecting, right certificates and up to the latest behaviour level.