Hi mates. Today we’re going to cover how to check Token signing and token decrypting certificates in the certificate store when you have a gMSA (Group Managed Service Accounts) account running AD FS service. AD FS token signing and token decrypting certificates are stored in the certificate store of the service account that runs AD FS.
Normally when you want to check the personal certificate store of a service account in AD FS you run the command prompt as another user, but when you have AD FS running with a gMSA account, you have no access to it’s password so, here comes a tip to help you check the self-signed token signing and token decrypting certificates in the certificate store.
