ADFS is deployed in our environment and SSL certificate has subject alternative name (SAN) entries for required 3 domains:
But now we have another requirement for DRS (Device Registration Service) to be configured.
But there are no SAN entries in the SSL certificate installed on our ADFS farm:
Do we have to deploy new SSL certificate with SAN entries for
enterpriseregistration.domain1.com, enterpriseregistration.domain2.com, enterpriseregistration.domain3.com
Do we have to reconfigure ADFS farm again?
Is it possible, we only have to change SSL certificate with required new entries and we dont redeploy ADFS farm?
Please help. I will appreciate your replies and solutions for given problem.
View best response
Yes mate, then install that certificate on the ADFS servers. This will need to be under change control as you are revoking and re-keying your certificate so may cause a small outage....