Set-AdfsCertificate

Set-AdfsCertificate

Sets the properties of an existing certificate that AD FS uses to sign, decrypt, or secure communications.

Sintaxis

Parameter Set: Default
Set-AdfsCertificate -CertificateType <String> -Thumbprint <String> [-IsPrimary] [-PassThru] [-Confirm] [-WhatIf] [ <CommonParameters>]

Descripción detallada

The Set-AdfsCertificate cmdlet sets the properties of an existing certificate that Servicios de federación de Active Directory (AD FS) uses to sign, decrypt, or secure communications.

Parámetros

-CertificateType<String>

Specifies the certificate type (that is, how the Federation Service uses the certificate). Los valores aceptables para este parámetro son los siguientes:

-- Infocard-Signing
-- Service-Communications
-- Token-Encryption
-- Token-Signing

-IsPrimary

Indicates that the certificate is primary. Primary token-signing certificates are used to digitally sign outgoing claims. Primary token-encrypting certificates are published in federation metadata for use by trusted claims providers. Information Card signing and service communications certificates are always primary.

-PassThru

Devuelve un objeto que representa el elemento con el que está trabajando. De forma predeterminada, este cmdlet no genera ningún resultado.

-Thumbprint<String>

Specifies the thumbprint of the certificate to use.

-Confirm

Solicita confirmación antes de ejecutar el cmdlet.

-WhatIf

Muestra lo que sucedería si se ejecutara el cmdlet. El cmdlet no se ejecuta.

<CommonParameters>

Este cmdlet admite los siguientes parámetros comunes: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer y -OutVariable. Para obtener más información, consulte about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

Entradas

El tipo de entrada es el tipo de los objetos que se pueden canalizar al cmdlet.

• Microsoft.IdentityServer.PowerShell.Resources.ServiceCertificate

  A class structure that represents a service certificate.

Salidas

El tipo de resultado es el tipo de objetos que emite el cmdlet.

• None

Notas

• Use the Set-AdfsRelyingPartyTrust or Set-AdfsClaimsProviderTrust cmdlets, as appropriate, to modify the certificates that are associated with a relying party or a claims provider.

Ejemplos

Example 1: Set a certificate

This command sets the primary token-signing certificate.

PS C:\> Set-AdfsCertificate -IsPrimary -CertificateType "Token-Signing" -Thumbprint ‎"fedd995b45e633d4ef30fcbc8f3a48b627e9a28b"

Temas relacionados

Add-AdfsCertificate

Get-AdfsCertificate

Remove-AdfsCertificate

Update-AdfsCertificate