Office 365

I have attached the error or alert I receive each time I open the Office 365 portal. How can I renew of fix this issue?
Who is Participating?
Vasil Michev (MVP)Connect With a Mentor Commented:
Ok, so you are using self-signed ones. You can use PowerShell to renew them:

Add-PSSnapin Microsoft.Adfs.Powershell

Update-ADFSCertificate -CertificateType: Token-Signing -Urgent:$true 

Update-ADFSCertificate -CertificateType: Token-decrypting -Urgent:$true

Update-MSOLFederatedDomain –DomainName <your domainname>

Open in new window

This will potentially cause a downtime for all federated users, so make sure to plan it after working hours.

To avoid this from happening in the future, you might want to enable auto-renewal:

And make sure to also check the validity of the communication cert.
Vasil Michev (MVP)Commented:
As the alert says, one of the certificates you are using with AD FS will expire soon. This might be either the token signing/decrypting certificates or the communication ones. Review the following article for the procedure of changing them:

If you are using self-signed certificates for token signing/decrypting, you might want to enable auto-renewal:

Lastly, make sure to update the trust settings once you have replaced the certificates:
TabDBAuthor Commented:
It is both the Token Decrypting and the Token Signing. So how do I create new certs? I see how to replace them but I did not build this system so I do not know how to create new ones. Is this performed on a server within my network? They appear to be internal created certs since the Service Communications cert appears to be created by a third party provider.
Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

TabDBAuthor Commented:
Very well. Thank You. I will proceed with this on Saturday.
Vasil Michev (MVP)Commented:
Oh, and of course make sure you have installed the WAAD PowerShell Module on the AD FS machine:

Here's also another article that covers all the steps in more detail:
TabDBAuthor Commented:
This solved my issue. Only took five minutes. Very much appreciated.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.