Set-AdfsSslCertificate
Sets an SSL certificate for HTTPS bindings for AD FS.
Syntax
Set-AdfsSslCertificate
-Thumbprint <String>
[-Force <Boolean>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
Description
The Set-AdfsSslCertificate cmdlet sets an SSL certificate for HTTPS bindings for Active Directory Federation Services (AD FS). Use this cmdlet to change the SSL certificate associated with the AD FS service. On Server 2016, this is a multi-node commandlet, meaning it only has to run on the primary and all nodes in the farm will be updated. On Server 2012R2, run the command on each ADFS server in the ADFS farm.
Use this cmdlet to change the deployment from one in which both user certificate authentication and device certificate authentication use port 443, to one in which user certificate authentication uses a non-standard port.
Specify a new certificate that does not contain a Subject Alternative Name (SAN) for certauth
.<federation service name>, as in certauth.contoso.com
.
Examples
Example 1: Set a certificate
PS C:\> Set-AdfsSslCertificate -Thumbprint "FC85DDB0FC58E63D8CB52654F22E4BE7900FE349"
This command sets the specified certificate for HTTPS bindings for AD FS.
Parameters
-Confirm
Prompts you for confirmation before running the cmdlet.
Type: | SwitchParameter |
Aliases: | cf |
Position: | Named |
Default value: | False |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-Force
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-Thumbprint
Specifies the thumbprint of a certificate. The thumbprint that you specify corresponds to the certificate installed on the federation server in the local store.
Type: | String |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Type: | SwitchParameter |
Aliases: | wi |
Position: | Named |
Default value: | False |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |