Set-AdfsSslCertificate localhost Access denied

Question

Set-AdfsSslCertificate localhost Access denied

dragan-vucanovic 96

I renew SSL certificate for ADFS and need to update configuration

Set-AdfsSslCertificate -Thumbprint XXXXc4f8b2d239bXXXXXXXXXXXXXX

And getting:

PS0317: One or more of AD FS servers returned errors during execution of command 'Set-AdfsSslCertificate'. Error information: PS0316: AD FS Server:
'localhost', Error: 'Connecting to remote server localhost failed with the following error message : Access is denied. For more information, see the
about_Remote_Troubleshooting Help topic.'.

Enter-PSSession for localhost only works afters -credentials are supplied

Enter-PSSession localhost -Credential $(Get-Credential)

Invoke-Command -ComputerName localhost -Credential $(Get-Credential) -ScriptBlock {Set-AdfsSslCertificate -Thumbprint XXXXc4f8b2d239b7dbeXXXXXXXXXXXXXXX}

also fails with same message

winrm get winrm/config/listener?Address=*+Transport=HTTP
Listener [Source="GPO"]
Address = *
Transport = HTTP
Port = 5985
Hostname
Enabled = true
URLPrefix = wsman
CertificateThumbprint
ListeningOn = 127.0.0.1, 1.1.1.1, ::1, fe80::5cb5:74ea:9e1d:1b0c%14

Accepted answer

1 additional answer

Your answer

Answer 1

dragan-vucanovic 96

Solved it by running Powershell with BuiltIn administrator account

Anonymous

2020-11-27T03:01:24.617+00:00

Good to hear that the issue has been resolved! And thanks for sharing your solution in the forum as it would be helpful to anyone who encounters similar issues.
If there is anything else we can do for you, please feel free to post in the forum.

Answer 2

Peter Puga 11

Solved it by removing account from Protected Users group.

Lerose Giuseppe 0 Reputation points

2023-09-07T06:05:52.84+00:00

Protected Users group is causing me several headaches. Before this problem I had another case with a Skype for Business administrator that unexpectedly failed to run such SfB powershell commands and locked out after few attempts. Even Microsoft support team failed to figure out that the cause was the membership of that account to the Protected Users group, we found it after months of troubleshooting.

Share via

Set-AdfsSslCertificate localhost Access denied

1 additional answer

Your answer