?
Solved

Replacing SSL Certificate for Single Sign on in Office 365 on Windows Server 2012

Posted on 2015-01-29
5
Medium Priority
?
293 Views
Last Modified: 2015-02-05
Hello,
   Our SSL certificate for Our federated services is expiring. We are no longer using the company whom we used when this was first setup, so we cannot renew the certificate but are going to be putting in a new one. I have found this article on the initial configuration:

http://blogs.technet.com/b/canitpro/archive/2013/06/13/step-by-step-setting-up-ad-fs-and-enabling-single-sign-on-to-office-365.aspx

However, I still have some questions, since this article is about initial setup, not replacing the cert:
1) First, is this article correct?
2) Second, do we need to undo the federation with MS  365 before doing this since it is a brand new cert from GoDaddy?
3) Is the process of getting the CSR done on the Proxy or the FS itself?
0
Comment
Question by:JesusFreak42
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 42

Accepted Solution

by:
Vasil Michev (MVP) earned 2000 total points
ID: 40577975
1) Server 2012 (i.e. AD FS 2.1) or Server 2012 R2 (i.e. AD FS 3.0)? Also, the article is for setting up AD FS, not replacing the certificate. Here are articles for replacing:

2.0/2.1: http://social.technet.microsoft.com/wiki/contents/articles/2554.ad-fs-2-0-how-to-replace-the-ssl-service-communications-token-signing-and-token-decrypting-certificates.aspx
3.0: http://blogs.technet.com/b/tune_in_to_windows_intune/archive/2013/11/13/replace-certificates-on-adfs-3-0.aspx

2) No, just update it
3) Doesnt matter, you can just import the new certificate regardless of where you renewed it from
0
 

Author Comment

by:JesusFreak42
ID: 40578005
Ok. When I spoke with GoDaddy they said I needed to upload the CSR. Where do I get that from?
0
 
LVL 42

Expert Comment

by:Vasil Michev (MVP)
ID: 40578027
0
 

Author Comment

by:JesusFreak42
ID: 40578040
Ok. So to be thorough I am going to list out the steps briefly:
1) Generate the Certificate Request (On the ADFS or Proxy) and then upload it to GoDaddy.
2) Import the Certificate onto the ADFS 2.1 server as described in the first part of the article.
3) Check for Auto Certificate Rollover, and then we are done

So, two more questions:
1) Where do I find the URL in the CURRENT certificate
2) If Auto Certificate Rollover is not enabled, how do I enable it?
0
 
LVL 42

Expert Comment

by:Vasil Michev (MVP)
ID: 40578250
1) What URL are you referring to? The domain name should be in the subject if that's what you mean

2) it's the last link in the article: http://social.technet.microsoft.com/wiki/contents/articles/1424.ad-fs-2-0-how-to-enable-and-immediately-use-autocertificaterollover.aspx
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes how to import an Outlook PST file to Office 365 using a third party product to avoid Microsoft's Azure command line tool, saving you time.
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question