Forum Discussion
Configuring DRS (Device Registration Service) in installed ADFS Farm
Dear All,
ADFS is deployed in our environment and SSL certificate has subject alternative name (SAN) entries for required 3 domains:
sts.domain1.com
sts.domain2.com
sts.domain3.com
But now we have another requirement for DRS (Device Registration Service) to be configured.
But there are no SAN entries in the SSL certificate installed on our ADFS farm:
enterpriseregistration.domain1.com
enterpriseregistration.domain2.com
enterpriseregistration.domain3.com
Do we have to deploy new SSL certificate with SAN entries for
enterpriseregistration.domain1.com, enterpriseregistration.domain2.com, enterpriseregistration.domain3.com
?
Do we have to reconfigure ADFS farm again?
Is it possible, we only have to change SSL certificate with required new entries and we dont redeploy ADFS farm?
Please help. I will appreciate your replies and solutions for given problem.
Thanks again.
Yes mate, then install that certificate on the ADFS servers. This will need to be under change control as you are revoking and re-keying your certificate so may cause a small outage....
3 Replies
- Sounds like you just need to re-key and re-issue the certificate with 6 SAN's and install it on your servers involved with ADFS and DRS
- Do you mean to say the below 6 SAN entries?
enterpriseregistration.domain1.com
enterpriseregistration.domain2.com
enterpriseregistration.domain3.com
sts.domain1.com
sts.domain2.com
sts.domain3.comYes mate, then install that certificate on the ADFS servers. This will need to be under change control as you are revoking and re-keying your certificate so may cause a small outage....
