Powershell to view and update ADFS certificate on the secondary server in the ADFS farm

What is the powershell remote cmd to view and update additional certificate in the ADFS farm. We have 2 ADFS servers and I cannot view or update the certificate on the secondary ADFS server since it's telling me "this cmdlet cannot be executed from a secondary server in a local database farm".
CiscoAznAsked:
Who is Participating?
 
MaheshArchitectCommented:
you are using windows internal database and hence you cannot view it from secondary server console as it is read only
U simply need to replace certs from primary server
For service communication cert (public SSL), you need to update it on primary 1st and then on secondary server from local certificate console personnel store you need to replace it
0
 
CiscoAznAuthor Commented:
How do I update the Service Communication cert to the secondary ADFS server? What's the powershell cmd?
0
 
MaheshArchitectCommented:
no need of powershell cmdlets

1st install new adfs SSL cert on primary server and then run below command from elevated command prompt
then use
Set-AdfsCertificate -CertificateType Service-Communications –Thumbprint xxxxxxxxxxxxxxxx

Open in new window

Then export certificate from primary server and import it on secondary server and run above command again
do same procedure on WAP servers as well
https://blogs.technet.microsoft.com/rmilne/2016/03/21/updating-windows-server-2012-r2-adfs-ssl-and-service-certificates/
OR
https://nolabnoparty.com/en/adfs-3-0-replace-ssl-certificate/
0
Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

 
CiscoAznAuthor Commented:
Thanks!
0
 
MaheshArchitectCommented:
The above cmdlet need to run from elevated PowerShell prompt on ADFS servers, In last comment I mention it to run from command prompt which is not correct.
0
 
MaheshArchitectCommented:
Answered
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.