Set-AdfsAlternateTlsClientBinding
Set-AdfsAlternateTlsClientBinding is accessible with the help of adfs module. To install adfs on your system please refer to this adfs.
Synopsis
Configures an existing AD FS deployment to use the same port for both device certificate and client certificate authentication.
Description
The Set-AdfsAlternateTlsClientBinding cmdlet configures an existing AD FS deployment to use the same port (443) for both device certificate and client certificate authentication (client TLS). The cmdlet creates an endpoint for user certificate authentication on certauth., such as certauth.TOSSolution.com.
To change the deployment back to one in which user certificate authentication uses a non-standard port, use the Set-AdfsSslCertificate cmdlet with a new certificate that does not contain a Subject Alternative Name (SAN) for certauth..
The Install-AdfsFarm cmdlet configures client TLS on port 49443 if the SSL certificate does not contain a Subject Alternative Name (SAN) for certauth., such as certauth.TOSSolution.com.
Use Set-AdfsAlternateTlsClientBinding with a new certificate that contains the SAN entry. It will configure AD FS to use port 443 for client TLS.
Parameters
-Force
Forces the command to run without asking for user confirmation.
Required? false
Position? named
Default value none
Accept pipeline input? false
Accept wildcard characters? false
-Member <String[]>
Required? false
Position? named
Default value none
Accept pipeline input? false
Accept wildcard characters? false
-Thumbprint <String>
Required? false
Position? named
Default value none
Accept pipeline input? false
Accept wildcard characters? false
-Confirm <SwitchParameter>
Prompts you for confirmation before running the cmdlet.Prompts you for confirmation before running the cmdlet.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
-WhatIf <SwitchParameter>
Shows what would happen if the cmdlet runs. The cmdlet is not run.Shows what would happen if the cmdlet runs. The cmdlet is not run.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
Syntax
Set-AdfsAlternateTlsClientBinding [-Thumbprint <String>] [-Member <String[]>] [-Force <Boolean>] [-WhatIf] [-Confirm] [<CommonParameters>]
—————–Example 1—————–
Configure a deployment
PS C:>Set-AdfsAlternateTlsClientBinding -Member “DC1.TOSSolution.com” -Thumbprint “a909342dd82ae41433e6f83886b00d4277a32a7b”
This command configures a deployment to use the same port for device certificate authentication and user certificate authentication. In this example, the certificate that has the specified thumbprint contains a SAN for certauth.TOSSolution.com.
You can check the Version, CommandType and Source of this cmdlet by giving below command.
Get-Command Set-AdfsAlternateTlsClientBinding
You can also read about
- Set-AdfsSslCertificate