SAM SSL expiration monitor for ADFS servers.

I am trying to monitor the expiration date for SSL Certificates in ADFS (Active Directory Federated Services) ADFS does not use IIS so the standard SSL Expiration Monitor does not work.

The Certificate is bound to the ADFS service. I like to create a monitor and send an Alert if the expiration date is less than a specified time.

I search and have not found anything that addresses this issue. Any suggestions would be appreciated.

Find more posts tagged with

adfs

"active directory federated services"

certificate monitor

Accepted answers

All comments

jm_sysadmin

What port is it running on? I know if you want to check ldaps just changing the port to 636 works. If updating the port doesn't work, then you may ahve to query the local store to gather cert data with something like powershell. @ me in the thread if you need an example of that monitor (I think the one we wrote sums up all certs in the store and just tells you to clean it all up).

stevehhcp

When I try with 636 it fails with

SocketException caught. SocketError: ConnectionRefused. Exception message: No connection could be made because the target machine actively refused it 10.x.x.x:636. I tried several ports and it fails. Just looking for something that will test ADFS certificate expiration and alert when the date is close. Any help will be appreciated.

adam.beedell

You can grab it from the local certificate store. I've a post on thwack from years back that covers this, or it can be re-written to be more specific for your use case

stevehhcp

do you have a link to your old Post? ~thank you