Blog Post

Exchange Team Blog
2 MIN READ

Keep your Federation Trust up-to-date

The_Exchange_Team's avatar
The_Exchange_Team
Platinum Contributor
Jan 22, 2021
Updated on 2/10/2021 Microsoft periodically refreshes certificates in Office 365 as part of our effort to maintain a highly available and secure environment. From Jan 23 rd , 2021, we are making a ...
Updated Feb 10, 2021
Version 8.0
hybrid
tips 'n tricks
troubleshooting
Mirela_Buru's avatar
Mirela_Buru
Icon for Microsoft rankMicrosoft
Jan 25, 2021

JeremyTBradshaw , seems you are talking about different certificates / things here.

This article is related to the Token Signing Certificates in Office 365 / Microsoft Federation Gateway platform, certificate which is renewed every six weeks by Microsoft, issuer being "Live ID STS Signing Public Key". This certificate you find it in Get-FederationTrust |FL Token*Certificate. Microsoft uses this certificate to sign Delegated Tokens for Exchange Organization federated with MFG.


The one mentioned by you where you have to renew / replace in a Federation Trust is the OrgCertificate in Get-FederationTrust this one has a validity of 5 years. This is a self signed certificate that the on-premises exchange server is issuing and assigned to the Federation Trust. This one you can find it in Get-ExchangeCertificate | where {$_.Services -like "*F*"} and it is on Get-FederationTrust | fl Org*certificate