Skip to main content Skip to complementary content

Exporting and Configuring the Certificate


  1. Request a new certification.
    1. Enable Web ISS manager through the Server Manager > Add a Role or Feature and select Web Server (IIS).
    2. From Windows Explorer, open Internet Information Services (IIS) Manager.
    3. Select the server and double-click Server Certificates.
    4. Click Create Self-Signed Certificate link located on the right part of the screen.
    5. Enter ADFS or a name of your choice in the dedicated field and click OK.
    6. Select the issued certificate and click Create Certificate Request link located on the right part of the screen.
    7. Enter the certificate information and click Next.
    8. Select the path to generate the certification and click Next to finish.
    9. From Windows Explorer, open the Certification Authority.
    10. Right-click it and select All tasks > Submit new request.
    11. Select Pending Requests from the left panel. Right-click the request and select All tasks > Issue.
    12. Press Windows+R and type mmc to open Microsoft Management Console.
    13. Click File > Add/Remove Snap-in.
    14. Select Certificates > Add.
    15. Select Computer account > Next. Click Finish and OK.
  2. Export the certificate:
    1. Click Personal > Certificates and select the AD FS certificate you renamed previously.
    2. Right-click the certificate line and select All Tasks > Export.
    3. Tick Yes, export the private key.
    4. Select PKCS > Next.
    5. Fill in the password field, then click Next.
    6. Select the path and name of the file to export, then click Finish.

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – let us know how we can improve!