Set-AdfsAlternateTlsClientBinding

Set-AdfsAlternateTlsClientBinding is accessible with the help of adfs module. To install adfs on your system please refer to this adfs.

Synopsis

Configures an existing AD FS deployment to use the same port for both device certificate and client certificate authentication.

Description

The Set-AdfsAlternateTlsClientBinding cmdlet configures an existing AD FS deployment to use the same port (443) for both device certificate and client certificate authentication (client TLS). The cmdlet creates an endpoint for user certificate authentication on certauth., such as certauth.TOSSolution.com.

To change the deployment back to one in which user certificate authentication uses a non-standard port, use the Set-AdfsSslCertificate cmdlet with a new certificate that does not contain a Subject Alternative Name (SAN) for certauth..

The Install-AdfsFarm cmdlet configures client TLS on port 49443 if the SSL certificate does not contain a Subject Alternative Name (SAN) for certauth., such as certauth.TOSSolution.com.

Use Set-AdfsAlternateTlsClientBinding with a new certificate that contains the SAN entry. It will configure AD FS to use port 443 for client TLS.

Parameters

 -Force
Forces the command to run without asking for user confirmation.

    Required?                    false
    Position?                    named
    Default value                none
    Accept pipeline input?       false
    Accept wildcard characters?  false

-Member <String[]>

    Required?                    false
    Position?                    named
    Default value                none
    Accept pipeline input?       false
    Accept wildcard characters?  false

-Thumbprint <String>

    Required?                    false
    Position?                    named
    Default value                none
    Accept pipeline input?       false
    Accept wildcard characters?  false

-Confirm <SwitchParameter>
    Prompts you for confirmation before running the cmdlet.Prompts you for confirmation before running the cmdlet.

    Required?                    false
    Position?                    named
    Default value                false
    Accept pipeline input?       false
    Accept wildcard characters?  false

-WhatIf <SwitchParameter>
    Shows what would happen if the cmdlet runs. The cmdlet is not run.Shows what would happen if the cmdlet runs. The cmdlet is not run.

    Required?                    false
    Position?                    named
    Default value                false
    Accept pipeline input?       false
    Accept wildcard characters?  false

Syntax

Set-AdfsAlternateTlsClientBinding [-Thumbprint <String>] [-Member <String[]>] [-Force <Boolean>] [-WhatIf] [-Confirm] [<CommonParameters>]

—————–Example 1—————–
Configure a deployment
PS C:>Set-AdfsAlternateTlsClientBinding -Member “DC1.TOSSolution.com” -Thumbprint “a909342dd82ae41433e6f83886b00d4277a32a7b”
This command configures a deployment to use the same port for device certificate authentication and user certificate authentication. In this example, the certificate that has the specified thumbprint contains a SAN for certauth.TOSSolution.com.

You can check the Version, CommandType and Source of this cmdlet by giving below command.

Get-Command Set-AdfsAlternateTlsClientBinding

Get-Command Set-AdfsAlternateTlsClientBinding powershell script command cmdlet adfs

You can also read about

  • Set-AdfsSslCertificate

To know more PowerShell cmdlets(Commands) on Active Directory Federation Services(ADFS) click here

Click on this Link for an Single place where you get all the PowerShell cmdlet sorted based on the modules.

You can also refer other blogs on PowerShell at link

You can also refer other blogs on Microsoft at link

And also if you required any technology you want to learn, let us know below we will publish them in our site http://tossolution.com/

Like our page in Facebook and follow us for New technical information.

References are taken from Microsoft

Leave a Reply

Your email address will not be published. Required fields are marked *