Comments on: Renew ADFS Token Signing Certificate https://webbanshee.net/adfs-token-signing-certificate/ Your Exchange Server Blog Thu, 28 Apr 2022 07:33:12 +0000 hourly 1 By: WebBanshee https://webbanshee.net/adfs-token-signing-certificate/#comment-9041 Tue, 09 Nov 2021 11:28:32 +0000 http://webbanshee.net/?p=1118#comment-9041 In reply to Marcus Wrightson.

Yes, that is correct. The secondary needs to be set as primary before you can introduce the thumbprint of the new certificate on the Exchange servers.
There will be a gap where OWA logins will not be possible starting with promoting the secondary cert as primary until the new AdfsSignCertificateThumbprint is set on the Exchange servers.

Regards
Sam

]]> By: Marcus Wrightson https://webbanshee.net/adfs-token-signing-certificate/#comment-9039 Tue, 09 Nov 2021 10:48:39 +0000 http://webbanshee.net/?p=1118#comment-9039 I take it that Exchange doesn’t support secondary ADFS certificates and the new token-signing certificate needs to be rolled over to primary before it can be assigned to Exchange?

]]>