Agent for SharePoint Guide › Advanced Options › How to Replace the Certificates for your SiteMinder Trusted Identity Provider

How to Replace the Certificates for your SiteMinder Trusted Identity Provider

SiteMinder trusted identity providers use the following SSL certificates to encrypt their communications with the SiteMinder Policy Server:

• A certificate authority certificate (CA-certificate or root certificate).
• An x.509 certificate (signing certificate).

When any of the previous certificates expire, you can replace them with valid certificates.

The following illustration describes how to replace the certificates of your SiteMinder trusted identity provider:

To replace the certificates for your SiteMinder trusted identity provider, follow these steps:

1. Replace the certificates on your servers.
2. Verify that your account has the required permissions.
3. Open a SharePoint 2010 management shell window on your SharePoint central administration server.
4. Identify your SiteMinder trusted identity provider.
5. Create a Windows PowerShell script to update the certificates.
6. Add the new certificates to your SiteMinder trusted identity provider.