Get-AdfsCertificate
Retrieves the certificates from AD FS.
Get-AdfsCertificate
[[-CertificateType] <String[]>]
[<CommonParameters>]
Get-AdfsCertificate
[-Thumbprint] <String[]>
[<CommonParameters>]
The Get-AdfsCertificate cmdlet retrieves the certificates that Active Directory Federation Services (AD FS) uses for token signing, token decrypting, card signing, and securing service communications.
PS C:\> Get-AdfsCertificate -CertificateType "Token-Signing"
This command retrieves the token-signing certificates for AD FS.
Specifies the type of the certificate to retrieve. The acceptable values for this parameter are:
- Infocard-Signing
- Service-Communications
- Token-Encryption
- Token-Signing
Type: | String[] |
Accepted values: | Service-Communications, Token-Decrypting, Token-Signing |
Position: | 0 |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Specifies the thumbprint of the certificate to retrieve.
Type: | String[] |
Position: | 0 |
Default value: | None |
Required: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
None
Microsoft.IdentityServer.PowerShell.Resources.ServiceCertificate
Returns one or more ServiceCertificate objects that represent the certificate objects for AD FS.
- You can use the Get-AdfsCertificate cmdlet without any parameters to get all the certificates.