Set-AdfsCertificate
Set-AdfsCertificate is accessible with the help of adfs module. To install adfs on your system please refer to this adfs.
Synopsis
Sets the properties of an existing certificate that AD FS uses to sign, decrypt, or secure communications.
Description
The Set-AdfsCertificate cmdlet sets the properties of an existing certificate that Active Directory Federation Services (AD FS) uses to sign, decrypt, or secure communications.
Parameters
-CertificateType
Specifies the certificate type (that is, how the Federation Service uses the certificate). The acceptable values for this parameter are:
-- Infocard-Signing
-- Service-Communications
-- Token-Encryption
-- Token-Signing
Required? true
Position? named
Default value none
Accept pipeline input? false
Accept wildcard characters? false
-IsPrimary <SwitchParameter>
Indicates that the certificate is primary. Primary token-signing certificates are used to digitally sign outgoing claims. Primary token-encrypting certificates are published in federation metadata for use by trusted claims providers. Information Card signing and service communications certificates are always primary.
Required? false
Position? named
Default value none
Accept pipeline input? false
Accept wildcard characters? false
-PassThru <SwitchParameter>
Returns an object representing the item with which you are working. By default, this cmdlet does not generate any output.
Required? false
Position? named
Default value none
Accept pipeline input? false
Accept wildcard characters? false
-Thumbprint <String>
Specifies the thumbprint of the certificate to use.
Required? true
Position? named
Default value none
Accept pipeline input? True (ByValue)
Accept wildcard characters? false
-Confirm <SwitchParameter>
Prompts you for confirmation before running the cmdlet.Prompts you for confirmation before running the cmdlet.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
-WhatIf <SwitchParameter>
Shows what would happen if the cmdlet runs. The cmdlet is not run.Shows what would happen if the cmdlet runs. The cmdlet is not run.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
Syntax
Set-AdfsCertificate -CertificateType <String> -Thumbprint <String> [-IsPrimary] [-PassThru] [-WhatIf] [-Confirm] [<CommonParameters>]
Notes
Use the Set-AdfsRelyingPartyTrust or Set-AdfsClaimsProviderTrust cmdlets, as appropriate, to modify the certificates that are associated with a relying party or a claims provider.
———————–Example 1———————–
Set a certificate
PS C:>Set-AdfsCertificate -IsPrimary -CertificateType “Token-Signing” -Thumbprint ”fbe324f5b45e633d4ef30fcbc8f3a48b627e9a28b”
This command sets the primary token-signing certificate.
You can check the Version, CommandType and Source of this cmdlet by giving below command.
Get-Command Set-AdfsCertificate
You can also read about
- Add-AdfsCertificate
- Get-AdfsCertificate
- Remove-AdfsCertificate
- Update-AdfsCertificate