{"id":16472,"date":"2016-04-27T11:00:32","date_gmt":"2016-04-27T09:00:32","guid":{"rendered":"http:\/\/nolabnoparty.com\/en\/?p=16472"},"modified":"2019-01-16T16:20:12","modified_gmt":"2019-01-16T15:20:12","slug":"adfs-3-0-replace-ssl-certificate","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/adfs-3-0-replace-ssl-certificate\/","title":{"rendered":"AD FS 3.0: replace SSL certificate"},"content":{"rendered":"<p><img decoding=\"async\" class=\"aligncenter wp-image-16476 size-full\" title=\"adfsreplacessl01\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl01.jpg\" alt=\"adfsreplacessl01\" width=\"602\" height=\"202\" \/><\/p>\n<p>To replace SSL certificate for\u00a0the <a href=\"https:\/\/nolabnoparty.com\/en\/adfs-3-0-install-adfs-server-pt-3\/\">AD FS Server<\/a>\u00a0in\u00a0a Office 365 environment, you need to perform some actions to re-establish the proper functionality.<\/p>\n<p>When the SSL certificate expires, the <strong>Office 365 authentication<\/strong> process doesn't\u00a0work and the users are no longer able to access their emails. The replacement of the SSL certificate is the only solution to get the service back.<!--more--><\/p>\n<p>&nbsp;<\/p>\n<h2>Import and replace SSL certificate in AD FS server<\/h2>\n<p>To perform\u00a0an SSL certificate request for AD FS, you can follow this detailed\u00a0<a href=\"https:\/\/nolabnoparty.com\/en\/adfs-3-0-ssl-certificate-signing-request-pt-2\/\">guide<\/a>.<\/p>\n<p>Log onto the AD FS server and from the <strong>Certificates Management\u00a0Console<\/strong> import the new certificate to the server in the <strong>Personal<\/strong> certificate store. Right click <strong>Certificates<\/strong>\u00a0item and select <strong>All Tasks &gt; Import<\/strong>\u00a0option.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16477 size-large\" title=\"adfsreplacessl02\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl02-600x373.jpg\" alt=\"adfsreplacessl02\" width=\"600\" height=\"373\" \/><\/p>\n<p>Select the new<strong> signed SSL<\/strong> certificate received from the CA and click <strong>Next<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16478 size-full\" title=\"adfsreplacessl03\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl03.jpg\" alt=\"adfsreplacessl03\" width=\"549\" height=\"528\" \/><\/p>\n<p>When the certificate has been imported successfully, click <strong>OK<\/strong> to close the window.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16479 size-full\" title=\"adfsreplacessl04\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl04.jpg\" alt=\"adfsreplacessl04\" width=\"261\" height=\"172\" \/><\/p>\n<p>Make sure that the <strong>service account<\/strong> used to run the AD FS service is granted <strong>read access<\/strong> to the private key. Right click the new certificate and select <strong>All Tasks &gt; Manage Private Keys<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16480 size-large\" title=\"adfsreplacessl05\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl05-600x373.jpg\" alt=\"adfsreplacessl05\" width=\"600\" height=\"373\" \/><\/p>\n<p>Assign read permission to the service account used to run the AD FS service and click <strong>OK<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16481 size-full\" title=\"adfsreplacessl06\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl06.jpg\" alt=\"adfsreplacessl06\" width=\"377\" height=\"457\" \/><\/p>\n<p>Export the new certificate including the <strong>private key<\/strong> and copy it to the <strong>WAP server<\/strong>. To export, select\u00a0<strong>Certificates<\/strong>\u00a0and right click the new imported certificate then\u00a0select <strong>All Tasks &gt; Export<\/strong>\u00a0option.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16482 size-large\" title=\"adfsreplacessl07\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl07-600x369.jpg\" alt=\"adfsreplacessl07\" width=\"600\" height=\"369\" \/><\/p>\n<p>Specify the option <strong>Yes, export the private key<\/strong> and click <strong>Next<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16483 size-full\" title=\"adfsreplacessl08\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl08.jpg\" alt=\"adfsreplacessl08\" width=\"549\" height=\"528\" \/><\/p>\n<p>Launch the\u00a0<strong>AD FS Management Console<\/strong>, expand <strong>Service<\/strong> item within the left pane and click <strong>Certificates<\/strong>. Under <strong>Service communications<\/strong> the certificate is displayed as expired. Click the link\u00a0<strong>Set Service Communications Certificate<\/strong>\u00a0to set the new certificate.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16484 size-large\" title=\"adfsreplacessl09\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl09-600x242.jpg\" alt=\"adfsreplacessl09\" width=\"600\" height=\"242\" \/><\/p>\n<p>The system presents all the installed certificates.\u00a0Select the valid certificate and click <strong>OK<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16485 size-full\" title=\"adfsreplacessl10\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl10.jpg\" alt=\"adfsreplacessl10\" width=\"439\" height=\"413\" \/><\/p>\n<p>Click <strong>OK<\/strong> to close the message. The <strong>Exipration Date<\/strong> of the certificate under Service communications has been updated.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16486 size-large\" title=\"adfsreplacessl11\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl11-600x242.jpg\" alt=\"adfsreplacessl11\" width=\"600\" height=\"242\" \/><\/p>\n<p>Restart the AD FS service.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16487 size-large\" title=\"adfsreplacessl12\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl12-600x220.jpg\" alt=\"adfsreplacessl12\" width=\"600\" height=\"220\" \/><\/p>\n<p>Changes made in the GUI does not change the configuration based on the HTTP.sys. To complete the configuration, we need to identify\u00a0the <strong>thumbprint<\/strong> of the certificate and execute a <strong>PowerShell command<\/strong>. Right click the new imported SSL certificate and select <strong>Open<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16488 size-large\" title=\"adfsreplacessl13\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl13-600x334.jpg\" alt=\"adfsreplacessl13\" width=\"600\" height=\"334\" \/><\/p>\n<p>Select <strong>Details<\/strong> tab,\u00a0find the <strong>Thumbprint<\/strong> for the new certificate and write it down removing the space.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16489 size-full\" title=\"adfsreplacessl14\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl14.jpg\" alt=\"adfsreplacessl14\" width=\"419\" height=\"522\" \/><\/p>\n<p>In this example the value is\u00a0e8fd5016542796214e94f72d76095f9fc587c731.<\/p>\n<p>From PowerShell run the command:<\/p>\n<blockquote><p>Set-AdfsSslCertificate \u2013Thumbprint &lt;ThumbprintCertificate&gt;<\/p><\/blockquote>\n<p><span style=\"color: #0000ff;\">PS C:\\&gt; Set-AdfsSslCertificate \u2013Thumbprint e8fd5016542796214e94f72d76095f9fc587c731<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16490 size-large\" title=\"adfsreplacessl15\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl15-600x112.jpg\" alt=\"adfsreplacessl15\" width=\"600\" height=\"112\" \/><\/p>\n<p>The command has been executed.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16491 size-large\" title=\"adfsreplacessl16\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl16-600x91.jpg\" alt=\"adfsreplacessl16\" width=\"600\" height=\"91\" \/><\/p>\n<p>Restart the server or the AD FS service on the server to complete the configuration change.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16492 size-large\" title=\"adfsreplacessl17\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl17-600x220.jpg\" alt=\"adfsreplacessl17\" width=\"600\" height=\"220\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2>Import\u00a0new certificate in the WAP\u00a0server<\/h2>\n<p>Log onto the <strong>WAP server<\/strong> and import the new certificate previously copied from the AD FS\u00a0server (check out\u00a0this <a href=\"https:\/\/nolabnoparty.com\/en\/adfs-3-0-ssl-certificate-signing-request-pt-2\/\">guide<\/a>\u00a0for additional details). Open the <strong>Certificate Management Console<\/strong>, right click <strong>Certificates<\/strong> and select <strong>All Tasks &gt; Import<\/strong> option.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16493 size-large\" title=\"adfsreplacessl18\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl18-600x356.jpg\" alt=\"adfsreplacessl18\" width=\"600\" height=\"356\" \/><\/p>\n<p>The new certificate has been successfully imported.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16494 size-large\" title=\"adfsreplacessl19\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl19-600x356.jpg\" alt=\"adfsreplacessl19\" width=\"600\" height=\"356\" \/><\/p>\n<p>Now open PowerShell and run the command for changing the certificate:<\/p>\n<blockquote><p>Set-WebApplicationProxySslCertificate \u2013Thumbprint &lt;ThumbprintCertificate&gt;<\/p><\/blockquote>\n<p><span style=\"color: #0000ff;\">PS C:\\&gt; Set-WebApplicationProxySslCertificate \u2013Thumbprint e8fd5016542796214e94f72d76095f9fc587c731<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16495 size-large\" title=\"adfsreplacessl20\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl20-600x109.jpg\" alt=\"adfsreplacessl20\" width=\"600\" height=\"109\" \/><\/p>\n<p>The command has been executed.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16496 size-large\" title=\"adfsreplacessl21\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl21-600x116.jpg\" alt=\"adfsreplacessl21\" width=\"600\" height=\"116\" \/><\/p>\n<p>A not well documented step is also necessary to complete the overall procedure. Checking the WAP Application certificate, the <strong>ExternalCertificateThumbprint<\/strong> is still pointing to the old Thumbprint. Take note also of the <strong>value in the ID<\/strong> field.<\/p>\n<p><span style=\"color: #0000ff;\">PS C:\\&gt; Get-WebApplicationProxyApplication | fl<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-20845 size-large\" title=\"adfsreplacessl21a\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl21a-600x259.jpg\" alt=\"adfsreplacessl21a\" width=\"600\" height=\"259\" \/><\/p>\n<p>From the AD FS server, double checking the AD FS certificate you can recognize the <strong>AD FS\u00a0Thumbprint is different<\/strong>\u00a0from the WAP External Certificate.<\/p>\n<p><span style=\"color: #0000ff;\">PS C:\\&gt; Get-AdfsSslCertificate <\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-20846 size-large\" title=\"adfsreplacessl21b\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl21b-600x160.jpg\" alt=\"adfsreplacessl21b\" width=\"600\" height=\"160\" \/><\/p>\n<p>To <strong>update also the WAP Application certificate<\/strong>, from the WAP Server PowerShell console run the following command:<\/p>\n<blockquote><p>Set-WebApplicationProxyApplication\u00a0\u2013ExternalCertificateThumbprint &lt;ThumbprintCertificate&gt;<\/p><\/blockquote>\n<p><span style=\"color: #0000ff;\">PS C:\\&gt; Set-WebApplicationProxyApplication\u00a0\u2013ExternalCertificateThumbprint e8fd5016542796214e94f72d76095f9fc587c731<\/span><\/p>\n<p>You can get the <strong>required ID value<\/strong> by running the command\u00a0<em>Get-WebApplicationProxyApplication | fl<\/em>\u00a0(as we previously did). Just <strong>copy and paste<\/strong>\u00a0the code.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-20847 size-large\" title=\"adfsreplacessl21c\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl21c-600x301.jpg\" alt=\"adfsreplacessl21c\" width=\"600\" height=\"301\" \/><\/p>\n<p>Checking the <strong>WAP Application certificate<\/strong>\u00a0once again, the External Certificate now <strong>reports the correct Thumbprint<\/strong>.<\/p>\n<p><span style=\"color: #0000ff;\">PS C:\\&gt; Get-WebApplicationProxyApplication | fl<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-20848 size-large\" title=\"adfsreplacessl21d\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl21d-600x265.jpg\" alt=\"adfsreplacessl21d\" width=\"600\" height=\"265\" \/><\/p>\n<p>When you\u00a0<strong>manually update<\/strong> the\u00a0AD FS certificates, you must update the\u00a0<strong>Office 365 domain<\/strong> as well.\u00a0Accessing the <strong>Event Viewer<\/strong> in the AD FS server you may find the certificate is\u00a0pointing to a <strong>wrong Thumbprint<\/strong>\u00a0due to not updated certificates in Office 365 domain.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16497 size-full\" title=\"adfsreplacessl22\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl22.jpg\" alt=\"adfsreplacessl22\" width=\"579\" height=\"254\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2>Manually update the AD FS certificates<\/h2>\n<p>To update\u00a0your Office 365 domain you must use\u00a0PowerShell command. Run the following command and enter your <strong>cloud service Administrator account<\/strong> credentials\u00a0to access the <strong>cloud service<\/strong>:<\/p>\n<p><span style=\"color: #0000ff;\">PS C:\\ $cred=Get-Credential<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16498 size-large\" title=\"adfsreplacessl23\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl23-600x321.jpg\" alt=\"adfsreplacessl23\" width=\"600\" height=\"321\" \/><\/p>\n<p>Connect the cloud service.<\/p>\n<p><span style=\"color: #0000ff;\">PS C:\\ Connect-MsolService \u2013Credential $cred<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16499 size-large\" title=\"adfsreplacessl24\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl24-600x304.jpg\" alt=\"adfsreplacessl24\" width=\"600\" height=\"304\" \/><\/p>\n<p>Run the following command to check the <strong>current signing certificates<\/strong> in AD FS:<\/p>\n<p><span style=\"color: #0000ff;\">PS C:\\ Get-ADFSCertificate \u2013CertificateType token-signing<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16500 size-large\" title=\"adfsreplacessl25\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl25-600x421.jpg\" alt=\"adfsreplacessl25\" width=\"600\" height=\"421\" \/><\/p>\n<p>In the example, the displayed\u00a0Thumbprint is associated to an\u00a0expired certificate.\u00a0To <strong>generate a new certificate<\/strong> run the command:<\/p>\n<p><span style=\"color: #0000ff;\">PS C:\\&gt; Update-ADFSCertificate \u2013CertificateType token-signing<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16502 size-large\" title=\"adfsreplacessl26\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl26-600x421.jpg\" alt=\"adfsreplacessl26\" width=\"600\" height=\"421\" \/><\/p>\n<p>Verify the update to check if\u00a0the\u00a0<strong>certificate<\/strong>\u00a0has been created.<\/p>\n<p><span style=\"color: #0000ff;\">PS C:&gt; Get-ADFSCertificate \u2013CertificateType token-signing<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16503 size-large\" title=\"adfsreplacessl27\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl27-600x623.jpg\" alt=\"adfsreplacessl27\" width=\"600\" height=\"623\" \/><\/p>\n<p>A primary and a secondary certificates have been created with new Thumbprint values. In <strong>AD FS Management Console<\/strong> the new certificates are displayed under\u00a0<strong>Token-signing<\/strong> area.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16504 size-large\" title=\"adfsreplacessl28\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl28-600x213.jpg\" alt=\"adfsreplacessl28\" width=\"600\" height=\"213\" \/><\/p>\n<p>Whilst the local AD FS authentication starts working again, trying to connect Office 365 the access to web application can't be completed. Looking at the Event Viewer, the <strong>WAP server<\/strong> is not able to <strong>contact the AD FS server<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16505 size-full\" title=\"adfsreplacessl29\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl29.jpg\" alt=\"adfsreplacessl29\" width=\"490\" height=\"252\" \/><\/p>\n<p>The AD FS server reports is not possible for\u00a0<strong>WAP server to authenticate<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16506 size-full\" title=\"adfsreplacessl30\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl30.jpg\" alt=\"adfsreplacessl30\" width=\"579\" height=\"254\" \/><\/p>\n<p>This scenario occurs when the <strong>trust relationship<\/strong> between AD FS and WAP servers is broken.<\/p>\n<p>&nbsp;<\/p>\n<h2>Re-establish trust between WAP and AD FS<\/h2>\n<p>From <strong>WAP server<\/strong>, retrieve the list of installed certificates with the command:<\/p>\n<p><span style=\"color: #0000ff;\">PS C:\\ Get-ChildItem -path cert:\\LocalMachine\\My<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16508 size-large\" title=\"adfsreplacessl31\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl31-600x277.jpg\" alt=\"adfsreplacessl31\" width=\"600\" height=\"277\" \/><\/p>\n<p>The error displayed\u00a0in the Event Viewer reports that the trusted certificate begins with Thumbprint BB59AB2 while the imported\u00a0certificate begins with 369083A.<\/p>\n<p>To re-establish trust between AD FS and WAP, <strong>on the WAP server<\/strong> run the following command entering the\u00a0<strong>local Domain<\/strong> <strong>Administrator account<\/strong> credentials\u00a0(es. NOLABNOPARTY\\Administrator):<\/p>\n<blockquote><p>Install-WebApplicationProxy -CertificateThumbprint &lt;ThumbprintCertificate&gt; -FederationServiceName &lt;sts.domain.com&gt;<\/p><\/blockquote>\n<p><span style=\"color: #0000ff;\">PS C:\\ Install-WebApplicationProxy -CertificateThumbprint e8fd5016542796214e94f72d76095f9fc587c731 -FederationServiceName sts.nolabnoparty.com<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16509 size-large\" title=\"adfsreplacessl32\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl32-600x285.jpg\" alt=\"adfsreplacessl32\" width=\"600\" height=\"285\" \/><\/p>\n<p>The configuration is being performed in the system.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16510 size-large\" title=\"adfsreplacessl33\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl33-600x147.jpg\" alt=\"adfsreplacessl33\" width=\"600\" height=\"147\" \/><\/p>\n<p>When the process has completed, the system displays the message <strong>DeploymentSucceded<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16511 size-large\" title=\"adfsreplacessl34\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl34-600x155.jpg\" alt=\"adfsreplacessl34\" width=\"600\" height=\"155\" \/><\/p>\n<p>Under <strong>Token-decrypting<\/strong> area the <strong>Expiration Date<\/strong> of the certificate is now shown as valid.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16512 size-large\" title=\"adfsreplacessl35\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl35-600x214.jpg\" alt=\"adfsreplacessl35\" width=\"600\" height=\"214\" \/><\/p>\n<p>The trust between WAP and AD FS has been <strong>restored<\/strong> as confirmed in the Event Viewer.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-16519 size-full\" title=\"adfsreplacessl36\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2016\/04\/adfsreplacessl36.jpg\" alt=\"adfsreplacessl36\" width=\"572\" height=\"276\" \/><\/p>\n<p>The access to Office 365 environment is now restored and user can access their emails again. Keep in mind to check your <a href=\"https:\/\/www.rapidsslonline.com\/ssl-tools\/ssl-checker.php\" target=\"_blank\" rel=\"noopener\">certificates expiration date<\/a> on regular basis to avoid service interruption.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/images\/firma.jpg\" alt=\"firma\" title=\"\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>To replace SSL certificate for\u00a0the AD FS Server\u00a0in\u00a0a Office 365 environment, you need to perform some actions to re-establish the proper functionality. When the SSL certificate expires, the Office 365 authentication process doesn't\u00a0work and the users are no longer able to access their emails. The replacement of the SSL certificate is the only solution to get the service back.<\/p>\n","protected":false},"author":3,"featured_media":16476,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"facebook_2879994398731222_17841400390232720":"","mastodon_115463926174894442_115463926174894442":"","bluesky_did:plc:tkabz5kl2rukzdwtuongv3kz_did:plc:tkabz5kl2rukzdwtuongv3kz":"","linkedin_93tdZWzMZc_93tdZWzMZc":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[1065,1721],"tags":[682,680,1567],"class_list":["post-16472","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-en","category-office365-en","tag-certificate-en","tag-ssl-en","tag-wap","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/16472","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=16472"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/16472\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/16476"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=16472"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=16472"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=16472"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}