%3CLINGO-SUB%20id%3D%22lingo-sub-1332162%22%20slang%3D%22en-US%22%3EWFM%20Certificate%20renewal%20process%20for%20SharePoint%202013%5C2016%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1332162%22%20slang%3D%22en-US%22%3E%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%20.75in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%3CSPAN%20style%3D%22font-weight%3A%20bold%3B%22%3EBelow%20is%20a%20Sample%20for%201%20Node%20WFM%20farm%20using%20WFM%2FSB%20certificate%20generation%20key%20%E2%80%93%20resetting%20expired%20certificate%20process%3A%3C%2FSPAN%3E%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%221%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3EIn%20order%20to%20reset%20generation%20key%20for%20WFM%20and%20SB%20the%20following%20steps%20needs%20to%20be%20done%3A%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.5in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3ESystem%20date%20and%20clock%20of%20WFM%20node%20must%20be%20set%20back%20before%20certificate%20expiration%20date%20(step%20needs%20to%20be%20done%20if%20multiple%20WFM%20nodes%20in%20farm)%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%222%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3EEnsure%20you%20have%20credentials%20for%20WFM%20Run-As%20service%20account%20and%20WFM%20passphrase%20for%20generated%20certificate.%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%223%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3EIn%20order%20to%20reset%20generation%20key%20for%20WFM%20and%20SB%20the%20following%20steps%20needs%20to%20be%20done%20WFM%20node%3A%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3ESystem%20date%20and%20clock%20of%20WFM%20node%20must%20be%20set%20back%20before%20certificate%20expiration%20date%20(step%20needs%20to%20be%20done%20if%20multiple%20WFM%20nodes%20in%20farm)%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%20.75in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%22%20type%3D%22disc%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%22%3EStop%20Windows%20Time%20Service%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%22%3EChange%20System%20date%20and%20clock%20to%20Day%20before%20certificate%20expired%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%20.75in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3ESteps%20to%20follow%20once%20System%20date%20and%20time%20has%20been%20set%20prior%20to%20expiration%20date%3A%26nbsp%3B%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%221%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3EOutput%20workflow%20manager%20powershell%20commands%20to%20clipboard%20and%20paste%20to%20notepad%3A%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%2F%2F%2F%2FWorkflow%20Manager%20Powershell%20results%20%E2%80%93%20use%20%E2%80%9C%7Cclip%E2%80%9D%20parameter%20to%20output%20results%20to%20clipboard%20and%20paste%20to%20notepad%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3EGet-WFFarm%20%7C%20clip%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3EGet-SBFarm%20%7C%20clip%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3EGet-SBNamespace%20%7Cclip%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E**%20%E2%80%9CGet-SBNamespace%E2%80%9D%20command%20will%20list%20ManageUser%20accounts%20%E2%80%93%20one%20of%20those%20accounts%20should%20be%20the%20logon%20credentials%20used.%20Account%20should%20have%20the%20required%20SQL%20permissions%20to%20reset%20expired%20certificates.%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%222%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3ERun%20below%20commands%20%E2%80%93%20reverting%20date%20and%20time%20should%20display%20all%20services%20are%20%E2%80%9CRunning%E2%80%9D%20before%20proceeding%20to%20next%20steps%3A%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3EGet-WFFarmStatus%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3EGet-SBFarmStatus%20%E2%80%93%20There%20are%20scenarios%20where%20Service%20Bus%20Message%20Broker%20service%20will%20get%20stuck%20at%20%E2%80%9CStarting%E2%80%9D%2C%20regardless%20continue%20to%20next%20step%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%223%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3EFrom%20Administrative%20SharePoint%20Management%20Shell%2C%20run%20below%20command%20to%20get%20current%20WorkflowHostURI%20used%20to%20register%20WFM%20to%20SharePoint%3A%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Menlo%3B%20font-size%3A%2010.0pt%3B%22%3E%3CSPAN%20style%3D%22color%3A%20orangered%3B%20background%3A%20whitesmoke%3B%22%3E%24wfProxy%20%3C%2FSPAN%3E%3CSPAN%20style%3D%22color%3A%20%238d8d8d%3B%20background%3A%20whitesmoke%3B%22%3E%3D%20%3C%2FSPAN%3E%3CSPAN%20style%3D%22color%3A%20blue%3B%20background%3A%20whitesmoke%3B%22%3EGet-SPWorkflowServiceApplicationProxy%3C%2FSPAN%3E%3CSPAN%20style%3D%22color%3A%20%23333333%3B%20background%3A%20whitesmoke%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Menlo%3B%20font-size%3A%2010.0pt%3B%22%3E%3CSPAN%20style%3D%22color%3A%20orangered%3B%20background%3A%20whitesmoke%3B%22%3E%24wfProxy%3C%2FSPAN%3E%3CSPAN%20style%3D%22color%3A%20%238d8d8d%3B%20background%3A%20whitesmoke%3B%22%3E.%3C%2FSPAN%3E%3CSPAN%20style%3D%22color%3A%20black%3B%20background%3A%20whitesmoke%3B%22%3EGetWorkflowServiceAddress((%3C%2FSPAN%3E%3CSPAN%20style%3D%22color%3A%20blue%3B%20background%3A%20whitesmoke%3B%22%3EGet-SPSite%20%3C%2FSPAN%3E%3CSPAN%20style%3D%22color%3A%20navy%3B%20background%3A%20whitesmoke%3B%22%3E-Limit%20%3C%2FSPAN%3E%3CSPAN%20style%3D%22color%3A%20purple%3B%20background%3A%20whitesmoke%3B%22%3E1%20%3C%2FSPAN%3E%3CSPAN%20style%3D%22color%3A%20navy%3B%20background%3A%20whitesmoke%3B%22%3E-WarningAction%20%3C%2FSPAN%3E%3CSPAN%20style%3D%22color%3A%20blueviolet%3B%20background%3A%20whitesmoke%3B%22%3ESilentlyContinue%3C%2FSPAN%3E%3CSPAN%20style%3D%22color%3A%20black%3B%20background%3A%20whitesmoke%3B%22%3E))%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%224%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3ERun%20below%20WFM%20powershell%20command%20to%20change%20passphrase%20and%20thumbprints%3A%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%24CertKey%3Dconvertto-securestring%20%E2%80%98PASSPHRASE%E2%80%99%20-asplaintext%20-force%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3ESet-WFCertificateAutoGenerationKey%20%E2%80%93Key%20%24CertKey%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3ESet-SBCertificateAutogenerationKey%20%E2%80%93Key%20%24CertKey%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3EThen%20run%3A%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3EStop-SBFarm%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3EUpdate-SBHost%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%225%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3ERun%20Workflow%20Manager%20Configuration%20Wizard%20-%20leave%20WFM%20farm%20first%20and%20then%20rejoin%20WFM%20farm%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%226%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3EEnable%20Windows%20Time%20Service%20%E2%80%93%20this%20will%20automatically%20change%20server%20back%20to%20current%20date%20and%20time%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%227%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3ESharePoint%202016%3A%20Step%20by%20Step%20guide%20to%20add%20Workflow%20Manager%20Certificate%20into%20SharePoint%20trust%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fsocial.technet.microsoft.com%252Fwiki%252Fcontents%252Farticles%252F34451.sharepoint-2016-step-by-step-guide-to-add-workflow-manager-certificate-into-sharepoint-trust.aspx%26amp%3Bdata%3D02%257C01%257Cjoeric%2540microsoft.com%257C8b9d832f57094352c01508d7484431db%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637057330033794575%26amp%3Bsdata%3DSPfAVT9hdFxuJyXivmqzSFGoQgPaJUuG%252BoKSyd8EHf4%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%22%3Ehttps%3A%2F%2Fsocial.technet.microsoft.com%2Fwiki%2Fcontents%2Farticles%2F34451.sharepoint-2016-step-by-step-guide-to-add-workflow-manager-certificate-into-sharepoint-trust.aspx%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%20.75in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%228%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3EExport%20WFM%20Client%20certificate%20using%20below%20command%20from%20Workflow%20Manager%20Powershell%3A%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3EGet-WFAutoGeneratedCA%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%22%20type%3D%22disc%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%22%3EAbove%20command%20creates%20%E2%80%9CAutoGeneratedCA.cer%E2%80%9D%20file%20in%20path%20where%20command%20was%20executed%20%E2%80%93%20default%20C%3A%5CProgram%20Files%5CWorkFlow%20Manager%5C1.0%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%229%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3ECopy%20%E2%80%9CAutoGeneratedCA.cer%E2%80%9D%20file%20to%20all%20SP%20nodes%20and%20Web%20Frontends%20%E2%80%93%20install%20certificate%20to%20Trusted%20Root%20Certification%20Authorities%20certificate%20store%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%22%20type%3D%22disc%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%22%3EReset%20IIS%20on%20WFEs%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%2210%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3ERegister%20WFM%20to%20SharePoint%20-%20%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3ESample%20command%3A%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%23002060%3B%22%3ERegister-SPWorkflowService%20%E2%80%93SPSite%20%22%3C%2FSPAN%3E%3CA%20href%3D%22http%3A%2F%2FFQDN%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2FFQDN%3C%2FA%3E%3CSPAN%20style%3D%22color%3A%20%23002060%3B%22%3E%22%20%E2%80%93WorkflowHostUri%20%22%3C%2FSPAN%3E%3CA%20href%3D%22http%3A%2F%2FFQDN%3A12291%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2FFQDN%3A12291%3C%2FA%3E%3CSPAN%20style%3D%22color%3A%20%23002060%3B%22%3E%22%20-AllowOAuthhttp%20-force%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-left%3A%201.125in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20color%3A%20%23002060%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20style%3D%22margin-left%3A%20.375in%3B%20direction%3A%20ltr%3B%20unicode-bidi%3A%20embed%3B%20margin-top%3A%200in%3B%20margin-bottom%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%20type%3D%221%22%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%20value%3D%2211%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%20font-weight%3A%20normal%3B%20font-style%3A%20normal%3B%22%3EFrom%20SharePoint%20Central%20Admin%2C%20run%20daily%20timer%20%E2%80%9CRefresh%20Trusted%20Security%20Token%20Services%20Metadata%20feed%20%5BFarm%20job%20%E2%80%93%20Daily%5D%E2%80%9D%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-top%3A%200%3B%20margin-bottom%3A%200%3B%20vertical-align%3A%20middle%3B%20color%3A%20%23002060%3B%22%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%22%3ETest%202013%20workflow%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1332162%22%20slang%3D%22en-US%22%3E%3CP%3EResetting%20expired%20WFM%20certificate%20process%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1332162%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESupport%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Microsoft

Below is a Sample for 1 Node WFM farm using WFM/SB certificate generation key – resetting expired certificate process:

  1. In order to reset generation key for WFM and SB the following steps needs to be done:

System date and clock of WFM node must be set back before certificate expiration date (step needs to be done if multiple WFM nodes in farm)

  1. Ensure you have credentials for WFM Run-As service account and WFM passphrase for generated certificate.

 

  1. In order to reset generation key for WFM and SB the following steps needs to be done WFM node:

System date and clock of WFM node must be set back before certificate expiration date (step needs to be done if multiple WFM nodes in farm)

 

  • Stop Windows Time Service
  • Change System date and clock to Day before certificate expired

 

Steps to follow once System date and time has been set prior to expiration date: 

  1. Output workflow manager powershell commands to clipboard and paste to notepad:

 

////Workflow Manager Powershell results – use “|clip” parameter to output results to clipboard and paste to notepad

 

Get-WFFarm | clip

Get-SBFarm | clip

Get-SBNamespace |clip

 

** “Get-SBNamespace” command will list ManageUser accounts – one of those accounts should be the logon credentials used. Account should have the required SQL permissions to reset expired certificates.

 

  1. Run below commands – reverting date and time should display all services are “Running” before proceeding to next steps:

Get-WFFarmStatus

Get-SBFarmStatus – There are scenarios where Service Bus Message Broker service will get stuck at “Starting”, regardless continue to next step

 

 

  1. From Administrative SharePoint Management Shell, run below command to get current WorkflowHostURI used to register WFM to SharePoint:

$wfProxy = Get-SPWorkflowServiceApplicationProxy           

$wfProxy.GetWorkflowServiceAddress((Get-SPSite -Limit 1 -WarningAction SilentlyContinue))

 

  1. Run below WFM powershell command to change passphrase and thumbprints:

$CertKey=convertto-securestring ‘PASSPHRASE’ -asplaintext -force;

Set-WFCertificateAutoGenerationKey –Key $CertKey

Set-SBCertificateAutogenerationKey –Key $CertKey

 

Then run:

Stop-SBFarm

Update-SBHost

 

  1. Run Workflow Manager Configuration Wizard - leave WFM farm first and then rejoin WFM farm

 

  1. Enable Windows Time Service – this will automatically change server back to current date and time

 

  1. SharePoint 2016: Step by Step guide to add Workflow Manager Certificate into SharePoint trust

https://social.technet.microsoft.com/wiki/contents/articles/34451.sharepoint-2016-step-by-step-guide...

 

  1. Export WFM Client certificate using below command from Workflow Manager Powershell:

Get-WFAutoGeneratedCA

 

  • Above command creates “AutoGeneratedCA.cer” file in path where command was executed – default C:\Program Files\WorkFlow Manager\1.0

 

  1. Copy “AutoGeneratedCA.cer” file to all SP nodes and Web Frontends – install certificate to Trusted Root Certification Authorities certificate store

 

  • Reset IIS on WFEs

 

  1. Register WFM to SharePoint -

 

Sample command:

Register-SPWorkflowService –SPSite "http://FQDN" –WorkflowHostUri "http://FQDN:12291" -AllowOAuthhttp -force

 

  1. From SharePoint Central Admin, run daily timer “Refresh Trusted Security Token Services Metadata feed [Farm job – Daily]”
  2. Test 2013 workflow