Solved

How to check if the certificate is expiring

Posted on 2014-04-23
9
669 Views
Last Modified: 2014-04-30
Hello all,
Our environment has the ADFS on Office 365. I saw the message states that the certificate is expiring. Please see the screenshot below. How may I check if the certificate is expiring in 90 days.
Thanks

cert
0
Comment
Question by:dongocdung
9 Comments
 
LVL 16

Accepted Solution

by:
Shaik M. Sajid earned 125 total points
Comment Utility
go to administrative tools - ADFS management console

adfs - services -certificates ..

u'll find all certificates with created and  expiry dates...

all the best..
0
 

Author Comment

by:dongocdung
Comment Utility
Shaik,
Do you know how to use powershell to check the certificate for other servers beside ADFS server?
Thanks,
0
 
LVL 9

Assisted Solution

by:Mahesh Sharma
Mahesh Sharma earned 250 total points
Comment Utility
Run cmdlet Get-AdfsCertificate -CertificateType "Token-Signing"


Let me know if it works
0
 

Author Comment

by:dongocdung
Comment Utility
Shaik,
Do you know how to use powershell to check the certificate for other servers beside ADFS server?
Thanks,
0
Too many email signature changes to deal with?

Are you constantly being asked to update your organization's email signatures? Do they take up too much of your time? Wouldn't you love to be able to manage all signatures from one central location, easily design them and deploy them quickly to users. Well, you can!

 
LVL 9

Expert Comment

by:Mahesh Sharma
Comment Utility
Get-Certificate cmdlet we can use on other server.
http://technet.microsoft.com/en-us/library/hh848632.aspx
0
 

Author Comment

by:dongocdung
Comment Utility
Hi MKS_,
I run your first command and got the error
Get-AdfsCertificate -CertificateType "Token-Signing"


The term 'Get-AdfsCertificate' is not recognized as the name of a cmdlet, funct
ion, script file, or operable program. Check the spelling of the name, or if a
path was included, verify that the path is correct and try again.
At line:1 char:20
+ Get-AdfsCertificate <<<<  -CertificateType "Token-Signing"
    + CategoryInfo          : ObjectNotFound: (Get-AdfsCertificate:String) [],
    CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

I am not sure that I can use the command in the article you gave me above because it is for Windows PowerShell 4.

Do I need to create this folder in order to let it work.

cert:\LocalMachine\My
Thanks,
0
 
LVL 9

Assisted Solution

by:Mahesh Sharma
Mahesh Sharma earned 250 total points
Comment Utility
Try to run Add-PSSnapin Microsoft.Adfs.PowerShell before running Get-ADFSCertificate & then check


For powershell 2.0 try this cmdlet:
Get-ChildItem -Recurse | where { $_.notafter -le (get-date).AddDays(75) } | select thumbprint, subject

Replace 75 with no of days you want
0
 

Author Comment

by:dongocdung
Comment Utility
The first command works but the second command runs but nothing returns. It is a blank screen.
0
 
LVL 28

Assisted Solution

by:becraig
becraig earned 125 total points
Comment Utility
you can run this on each computer (from a powershell window)
Get-ChildItem cert:\LocalMachine\My -Recurse | where { $_.notafter -le (get-date).AddDays(30) } | select thumbprint, subject, notafter

Open in new window

0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
exchange 2010 turning off 3des ciphers 2 32
lync 2013 7 30
exchange, transaction logs 3 25
Exchange 2016 anti-spam 3 31
Synchronize a new Active Directory domain with an existing Office 365 tenant
Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now