Single certificate for multiple relying party trusts

Question

I'm using ADFS 2.1 on Windows 2012 (not R2), with an SQL database.

By default it should not be possible to have multiple Relying Party Trusts with the same certificate, but an optional update should allow that (https://support.microsoft.com/en-us/kb/2877424).

I have a system where the update should have been applied, but I'm getting an error (MSIS7613) that makes think it was not.

Is there a way to check if the uniqueness constraint is enforced or not?

score 1 · Answer 1 · answered Oct 04 '16 at 09:40

1

You should note that after the hotfix has been applied on your Federation server without any error messages, a reboot is required to make the changes effective.

If it still doesn't work after reboot, then you may have to request a support ticket with Microsoft CSS for further troubleshooting.

answered Oct 04 '16 at 09:40

Jimmy Sun

319
1
4

1

I'm actually asking for a way to verify if the constraint is present or not, not about installation instructions. – Paolo Tedesco Oct 04 '16 at 10:28
I'm afraid there's no way to verify this, you really should contact Microsoft for help. – Jimmy Sun Oct 10 '16 at 01:18

Single certificate for multiple relying party trusts

1 Answers1