Get-Adfs Certificate

Module:
adfs
Retrieves the certificates from AD FS.

Syntax 

Get-AdfsCertificate
   [[-CertificateType] <String[]>]
   [<CommonParameters>]
Get-AdfsCertificate
   [-Thumbprint] <String[]>
   [<CommonParameters>]

Description

The Get-AdfsCertificate cmdlet retrieves the certificates that Active Directory Federation Services (AD FS) uses for token signing, token decrypting, card signing, and securing service communications.

Examples

Example 1: Get the token-signing certificates 

PS C:\> Get-AdfsCertificate -CertificateType "Token-Signing"

This command retrieves the token-signing certificates for AD FS.

Required Parameters

-Thumbprint

Specifies the thumbprint of the certificate to retrieve.

Type: String[]
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

Optional Parameters

-CertificateType

Specifies the type of the certificate to retrieve. The acceptable values for this parameter are:

  • Infocard-Signing
  • Service-Communications
  • Token-Encryption
  • Token-Signing
Type: String[]
Parameter Sets: Service-Communications, Token-Decrypting, Token-Signing
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

Outputs

Microsoft.IdentityServer.PowerShell.Resources.ServiceCertificate

This cmdlet generates a class structure that represents the certificate objects for ADFS.

Notes

  • You can use the Get-AdfsCertificate cmdlet without any parameters to get all the certificates.