Hi mates. Today we’re going to explain how to add a new federation server to an existing AD FS farm using PowerShell. These steps can be useful in case you want to automate your AD FS farm deployment.
Month: February 2021
AD FS – Accessing the certificate store of a gMSA account
Hi mates. Today we’re going to cover how to check Token signing and token decrypting certificates in the certificate store when you have a gMSA (Group Managed Service Accounts) account running AD FS service. AD FS token signing and token decrypting certificates are stored in the certificate store of the service account that runs AD FS.
Normally when you want to check the personal certificate store of a service account in AD FS you run the command prompt as another user, but when you have AD FS running with a gMSA account, you have no access to it’s password so, here comes a tip to help you check the self-signed token signing and token decrypting certificates in the certificate store.
