Avatar of Kyle
Kyle
Flag for United States of America asked on

Generate SSL CSR for ADFS

understand how ADFS & Web Proxy servers work. I'm having an issue getting a standard SSL issued to work for the configuration of the ADFS and then the Web Proxy. I'm assuming I need to generate a CSR from the ADFS server at
a minimum of 2048.

How do I generate the CSR for the ADFS domain ss0.contoso.org?
SSL / HTTPS* Active Directory Federation Services (ADFS)

Avatar of undefined
Last Comment
Mahesh

8/22/2022 - Mon
David Favor

Best provide...

1) flow chart of your device chain

2) how exactly you generated your CSR + cert

3) where exactly you've setup your cert (device in chain)

4) exact error you're seeing

5) before any of this will work, you must fix ss0.contoso.org where it resolves publicly, as currently this host returns no IP.

Note: SSL certs pin to hostnames returning IPs. You must fix #5 before you can make any progress.... unless all this is a Private CA setup, which will always cause you problem. Based on your description above, you must use a host that resolves + a cert generated with a public issuance chain.

https://LetsEncrypt.org provides free certs, SNI + Wildcard.
Kyle

ASKER
@David

The question is how to generate the CSR from the ADFS server to generate the SSL. The SSL is already purchased but I need to rekey it with an Exportable Private Key.
ASKER CERTIFIED SOLUTION
Mahesh

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Mahesh

I mean adfs
Its typo above
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes