Forum Discussion
Alexander Filipin
Jun 06, 2017Brass Contributor
ADFS - Windows Server 2016 - CNG key support?
Did ADFS 2016 add support for SSL certificates with CNG keys? For Windows Server 2012R2 the answer was clear: No For ADFS 2016 nothing is mentioned on the documentation (WS2012R2 docuemtation was w...
- Jun 09, 2017
Research and testing done: YES ADFS2016 added support for SSL certificates with CNG keys.
But you could also create a cert with legacy keys and good signature algorithm by using certutil.exe (good if for < ADFS2016 when CNG keys are not supported but signature algorithm should be good)
You can also convert CNG to legacy with certutil.exe
Alexander Filipin
Jun 09, 2017Brass Contributor
Research and testing done: YES ADFS2016 added support for SSL certificates with CNG keys.
But you could also create a cert with legacy keys and good signature algorithm by using certutil.exe (good if for < ADFS2016 when CNG keys are not supported but signature algorithm should be good)
You can also convert CNG to legacy with certutil.exe
- DaniMartMSJun 10, 2017
Microsoft
Great work, Alexander! Thank for coming back and ensuring other users will see your solution.