Page History

If you are using a self-signed SSL certificate for your DualShield SSO, then you need to import the DualShield SSO's CA certificate into the local computer certificate store as a root trusted CA on your ADFS server., and you need to disable the certificate revocation check

Import Certificates

First, you need to import the DualShield SSO's CA certificate

To import the CA certificate

Image Removed

Disable Revocation Check

Furthermore, you need to disable the revocation check on the self-signed claim provider certificate.

On Furthermore, on the ADFS server, execute the execute the following commands on in the Windows Powershell console:

Add-PSSnapin Microsoft.Adfs.Powershell

...

Set-ADFSClaimsProviderTrust -TargetName "Claims_Provider_Name" -SigningCertificateRevocationCheck None

Similarly, if you are using a self-signed certificate for your relying party application, then you have to import the self-signed CA certificate into certificate into the local computer certificate store as a root trusted CA on your ADFS server. Then,  execute the execute the following commands on the Windows Powershell console to disable the revocation check on the self-signed relying party certificate :

Add-PSSnapin Microsoft.Adfs.Powershell

...

Set-ADFSRelyingPartyTrust  -targetname "Relying_Party_Name" -EncryptionCertificateRevocationCheck None