Configuring DRS (Device Registration Service) in installed ADFS Farm

[amanpreet singh]

Dear All,

ADFS is deployed in our environment and SSL certificate has subject alternative name (SAN) entries for required 3 domains:

sts.domain1.com
sts.domain2.com

sts.domain3.com

But now we have another requirement for DRS (Device Registration Service) to be configured.

But there are no SAN entries in the SSL certificate installed on our ADFS farm:

enterpriseregistration.domain1.com

enterpriseregistration.domain2.com

enterpriseregistration.domain3.com

Do we have to deploy new SSL certificate with SAN entries for

enterpriseregistration.domain1.com, enterpriseregistration.domain2.com, enterpriseregistration.domain3.com

 ?

Do we have to reconfigure ADFS farm again?

Is it possible, we only have to change SSL certificate with required new entries and we dont redeploy ADFS farm?

Please help. I will appreciate your replies and solutions for given problem.

Thanks again.

[#2]

Sounds like you just need to re-key and re-issue the certificate with 6 SAN's and install it on your servers involved with ADFS and DRS

[#3]

Do you mean to say the below 6 SAN entries?

enterpriseregistration.domain1.com
enterpriseregistration.domain2.com
enterpriseregistration.domain3.com
sts.domain1.com
sts.domain2.com
sts.domain3.com

[#4 · Accepted solution]

Yes mate, then install that certificate on the ADFS servers. This will need to be under change control as you are revoking and re-keying your certificate so may cause a small outage....