Get-ADFSCertificate

  • Article

Get-ADFSCertificate

Gets the certificates that are in the Federation Service.

Syntax

Parameter Set: ByType
Get-ADFSCertificate [[-CertificateType] <String[]> ] [ <CommonParameters>]

Parameter Set: ByReference
Get-ADFSCertificate [-Thumbprint] <String[]> [ <CommonParameters>]

Detailed Description

The Get-ADFSCertificate cmdlet retrieves the certificates that the Federation Service uses for token signing, token decrypting, card signing and securing service communications.

Parameters

-CertificateType<String[]>

Specifies the type of the certificate to retrieve. Possible certificate types include the following:

Token-Signing, Token-Encryption, Service-Communications, or Infocard-Signing.

Aliases

none

Required?

false

Position?

1

Default Value

none

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

-Thumbprint<String[]>

Specifies the thumbprint of the certificate to retrieve.

Aliases

none

Required?

true

Position?

1

Default Value

none

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

<CommonParameters>

This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see    about_CommonParameters.

Inputs

The input type is the type of the objects that you can pipe to the cmdlet.

  • None

Outputs

The output type is the type of the objects that the cmdlet emits.

  • Microsoft.IdentityServer.PowerShell.Resources.ServiceCertificate

    A class structure that represents the certificate objects for the Federation Service.

Notes

  • You can use the Get-ADFSCertificate cmdlet without any parameters to get all the certificates.

Examples

-------------------------- EXAMPLE 1 --------------------------

Description

-----------

Gets the token-signing certificates for the Federation Service.

C:\PS>Get-ADFSCertificate -CertificateType "Token-Signing"

Add-ADFSCertificate

Remove-ADFSCertificate

Update-ADFSCertificate