OIF-do I need to exchange certificate,keys if using selfsigned certificate?

I have setup OIF federated authentication and it works between SP and IdP. I think I'm using self-signed certificates.
With my setup, I did not have to exchange certificate between SP and IdP, however, my customer (IdP side) told me that I need to exchange with them the self-signed certificates and public key/private key.
Do I need to exchange self-signed certificates and public key/private key between SP and IdP or only third party CA signed certs need to be exchanged?
Also, to exchange certificate, I thought I just need to add it through "Trusted CAs and CRLs" in EM, but I'm not sure how to exchange public key/private key?
Thanks

I got "exchange certificate" working by enable certificate validation and adding IdP's certificate to SP or vice versa. the configuration was done through "Trusted CAs and CRLs" in OIF EM.
However, I'm not sure what "public key needs to be exchanged" means. Could you please tell me what to do? or, are you saying public key is part of certificate and it exchanged by exchangeing certificate?
Thanks

Similar Messages

How to obtain the Management Certificate Key for using Azure with Release Managment

In the "Release Management" app in administration --> Manage Azure one must provide a "Management Certificate Key".
I have created a self-signed cert and uploaded it to Azure Portal --> Settings --> Management certificates
How do I get the key?
Thanks ))

Hi Atwater and Sons,
when you look at the blog post paragraph four you find a link
Download the settings file from the Azure portal to get your subscription ID and Management Certificate key.
After you have downloaded the file, open the file with Notepad.
You will find everything there - except the storage Account Name:
<PublishData>
<PublishProfile
SchemaVersion="2.0"
PublishMethod="AzureServiceManagementAPI">
<Subscription
ServiceManagementUrl="***"
Id="***"
Name="***"
ManagementCertificate="***" />
</PublishProfile>
Copy the Id and the ManagementCertificate and past them into RM (Manage Azure)
Your Storage Account Name: Blog Post Paragraph four
Go here to get the name of an existing storage account or add
a new storage account using the Azure portal.
Regards,
Daniel

Disable the need of the function key when using the control key

I'm often using the F1-12 keys when using an IDE for developing. Those IDE's use the CTR+F1-12 shortcuts quite a bit and it's always needed to use FN+CTR+F1-12 which is ridiculous and redundant. Is there a way to keep using the functions assigned to F1-12 (Adjust volume, brightness...) without pressing the function key and be able of using CTR or ALT +F1-12 without the need of pressing the function key?

According to the system help text it is possible. And for me it works as described in the help text on my MacBook Pro.
But on my Mac Pro (late 2013) the relevant control (“Use all F1, F2, etc. keys as standard function keys”) is missing form System Preferences >> Keyboard >> Keyboard.
From the help text for the topic "Use keyboard function keys:"
If you frequently use the alternate function of a function key, you can switch the keyboard so that the function keys perform the alternate function without your pressing Fn. You then hold down Fn to use a function key’s original hardware control function. If your keyboard doesn’t have an Fn key, try holding down the Control key.
Choose Apple menu > System Preferences, then click Keyboard.
Open Keyboard preferences
Select the “Use all F1, F2, etc. keys as standard function keys” checkbox.

What certs are needed in Exchange 2013?

When I look in the certificate store in the Exchange Administrative Center I see 3 certificates. The one I used to self sign during installation, the one I created utilizing the local CA, and the other cert I don't know what it is.
The first cert is the one from the local CA. Now in the "issuer" line the first field is 'cn=c2sddc2-ca, cn=....'. The c2sddc2-ca is NOT the machine name of the CA server, should it be? I just left the name that the AD Certificate Services gave
the service. Plus this cert only handles services IMAP and POP. Is this okay? I could have sworn I selected all the services.THe second cert is the self signed cert created during installation and it handles IMAP, SMTP, POP, IIS. The last cert I have no idea
where it came from, it handles no services. So what certs if any can I delete here? CAn I delete the self signed and the unknown cert? I want to be as lean as possible.

Hi,
Firstly, I’d like to explain, the issuer name is the local CA name not must be your Exchange server name. only one certificate can deploy to the IIS services in one environment. In Exchange 2013, there is an empty certificate which deploy none:
http://exchangeserverpro.com/exchange-server-2013-ssl-certificates/
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make
sure that you completely understand the risk before retrieving any suggestions from the above link.
For ease of administration, as well as for lower costs, it is recommended to provision as few certificates as possible. As long as all needed names are added in the certificate, we can install one certificate in one organization.
And here is the minimized namespace which we need to add in our certificate:
Autodiscover.domain.com
The host name in all URLs of IIS services and Outlook Anywhere
Legacy.domain.com
If you have any question, please feel free to let me know.
Thanks,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Angela Shi
TechNet Community Support

Can't find 'keys' associated with certificates to create p.12 certificates

Hi there, Hope you can help. Wanting to create p.12 Developer & Distribution Certificates. Have gone through procedure to point of double clicking 'ios_development.cer' and 'ios_distribution.cer' to install into Keychain Access.
I can see that these certicates are there in Keychain Access under System'Certificates'.
However in System'Keys' the relevant keys are not there. And in Login'Keys' there are 4 keys that might be the correct ones: 2 public keys, 2 private keys. BUT they do not have an arrow on the left so I cannot see if the correct certificate is associated with them (as it described in the step by step guide to DPS pg19).
Mac currently on 10.6.8, so I have not yet downloaded X Code. Planning to upgrade system shortly. When I upgrade & install X Code, will I then be able to see correct keys & see the associated certificates together in 'Keys'? Is there anything I have missed? Hope you can help, thank you.

Xcode is most likely unrelated to this issue (although you do need to install an intermediate certificate at some point, either with xcode or individually). If you double-click the .cer file and the twirl-down arrow fails to appear, it usually means the certificate was not imported properly. Try using the Import command in the menu. If that doesn't work, delete and revoke everything you created and try again. For best results, close the Keychain Access utility each time you complete a p12 certificate.

Need to get primary key value from entity

Hi,
I have 2 pages. In the first page on click of GO button, Im inserting data into table using EO and Immediately navigating to second page.
Primary Key value is generated in EOImpl java file.
In second screen, in the header region, I need to show the row inserted in table.
to query the VO, i need to have primary key generated in EOImpl.
Please let me know how can i get this value in either in PFR of first page or in PR of second page. Thanks.

Hi
have you included the eo that tyou are refering to in the header oif the second page..
if both pages are using the same AM, the data will appear.
at worse can you can get the ID from the eo using amethod in your AM.

Use ssl certificate for Exchange Account

Hello everyone!
I have some problem with Exchange instance and iphones.
I have Front server with client authentication via ssl certificates. How i can use this certificate on iphone to connect iphone to exchanges account?
After few hours of googling i find only one solution here - http://www.msexchange.org/articles-tutorials/exchange-server-2010/mobility-clien t-access/configuring-certificate-based-authentication-exchange-2010-activesync-p art2.html
In few words - it can be done with iPhone Configuration Utility
Does this ONLY solution or i can import ssl cert directly to iphone?
Thanks a lot for any help

Hi bb9193, this will not be no short-term solution, but you might consider using a MDM-solution. With MDM it is possible to deinstall and reinstall the Exchange profile over the air, so your users will not need to do more than just reenter their Exchange password.
Best regards,
Detlev

Can't restore apple id ,you were blocked for security reasons, but to restore the need to enter the key after typing it sends a 4-digit code on the ipad , but at ipade I am not connected to icloud ,and to connect you need to recover your account

can't restore apple id , because apple were blocked for security reasons, but to restore the need to enter the key two- step werification . after typing it , apple sends a 4-digit code on the ipad , but at ipad I am not connected to icloud ,so i cant get code . but if i want to recover apple id, i need to connect icloud, so what to do? help !

I have (sorry forgot to add that). I was switched around and finally I was told I would be put through to a supervisor but after being on hold for about 10 minutes the phone went dead, I did not lose connection so I do not know if I was hung up on or there was some technical difficulty. I called again yesterday and did in fact speak with a supervisor for Account Security but he told me he did not know why it was happening and put me through to a different number but that ended up not being any helpful either. That's when I decided to give it a shot on here!

I need help with Creating Key Pairs

Hello,
I need help with Creating Key Pairs, I generate key pais with aba provider, but the keys generated are not base 64.
the class is :
import java.io.*;
import java.math.BigInteger;
import java.security.*;
import java.security.spec.*;
import java.security.interfaces.*;
import javax.crypto.*;
import javax.crypto.spec.*;
import au.net.aba.crypto.provider.ABAProvider;
class CreateKeyPairs {
private static KeyPair keyPair;
private static KeyPairGenerator pairGenerator;
private static PrivateKey privateKey;
private static PublicKey publicKey;
public static void main(String[] args) throws Exception {
if (args.length != 2) {
System.out.println("Usage: java CreateKeyParis public_key_file_name privete_key_file_name");
return;
createKeys();
saveKey(args[0],publicKey);
saveKey(args[1],privateKey);
private static void createKeys() throws Exception {
Security.addProvider(new ABAProvider());
pairGenerator = KeyPairGenerator.getInstance("RSA","ABA");
pairGenerator.initialize(1024, new SecureRandom());
keyPair = pairGenerator.generateKeyPair();
privateKey = keyPair.getPrivate();
publicKey = keyPair.getPublic();
private synchronized static void saveKey(String filename,PrivateKey key) throws Exception {
ObjectOutputStream out= new ObjectOutputStream(new FileOutputStream(filename));
out.writeObject(key);
out.close();
private synchronized static void saveKey(String filename,PublicKey key) throws Exception {
ObjectOutputStream out= new ObjectOutputStream( new FileOutputStream(filename));
out.writeObject(key);
out.close();
the public key is:
�� sr com.sun.rsajca.JSA_RSAPublicKeyrC�� xr com.sun.rsajca.JS_PublicKey~5< ~��% L thePublicKeyt Lcom/sun/rsasign/p;xpsr com.sun.rsasign.anm��9�[ [ at [B[ bq ~ xr com.sun.rsasign.p��(!g�� L at Ljava/lang/String;[ bt [Ljava/lang/String;xr com.sun.rsasign.c�"dyU�| xpt Javaur [Ljava.lang.String;��V��{G xp q ~ ur [B��T� xp ��ccR}o��[!#I��lo��
��^"`8�|��Z>��&
d ��"B��
^5��a��jw9��D��D�)�*3/h��7�|��I�d�$�4f�8_�|��yuq ~
How i can generated the key pairs in base 64 or binary????
Thanxs for help me
Luis Navarro Nu�ez
Santiago.
Chile.
South America.

I don't use ABA but BouncyCastle
this could help you :
try
java.security.Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
java.security.KeyPairGenerator kg = java.security.KeyPairGenerator.getInstance("RSA","BC");
java.security.KeyPair kp = kg.generateKeyPair();
java.security.Key pub = kp.getPublic();
java.security.Key pri = kp.getPrivate();
System.out.println("pub: " + pub);
System.out.println("pri: " + pri);
byte[] pub_e = pub.getEncoded();
byte[] pri_e = pri.getEncoded();
java.io.PrintWriter o;
java.io.DataInputStream i;
java.io.File f;
o = new java.io.PrintWriter(new java.io.FileOutputStream("d:/pub64"));
o.println(new sun.misc.BASE64Encoder().encode(pub_e));
o.close();
o = new java.io.PrintWriter(new java.io.FileOutputStream("d:/pri64"));
o.println(new sun.misc.BASE64Encoder().encode(pri_e));
o.close();
java.io.BufferedReader br = new java.io.BufferedReader(new java.io.FileReader("d:/pub64"));
StringBuffer keyBase64 = new StringBuffer();
String line = br.readLine ();
while(line != null)
keyBase64.append (line);
line = br.readLine ();
byte [] pubBytes = new sun.misc.BASE64Decoder().decodeBuffer(keyBase64.toString ());
br = new java.io.BufferedReader(new java.io.FileReader("d:/pri64"));
keyBase64 = new StringBuffer();
line = br.readLine ();
while(line != null)
keyBase64.append (line);
line = br.readLine ();
byte [] priBytes = new sun.misc.BASE64Decoder().decodeBuffer(keyBase64.toString ());
java.security.KeyFactory kf = java.security.KeyFactory.getInstance("RSA","BC");
java.security.Key pubKey = kf.generatePublic(new java.security.spec.X509EncodedKeySpec(pubBytes));
System.out.println("pub: " + pubKey);
java.security.Key priKey = kf.generatePrivate(new java.security.spec.PKCS8EncodedKeySpec(priBytes));
System.out.println("pri: " + priKey);
catch(Exception e)
e.printStackTrace ();
}

FMS on Amazon Web Services License. Does it need enter License(Serial Key)?

FMS on Amazon Web Services License. Does it need enter License(Serial Key)?
After Subscribe on adobe.com(Adobe Flash Media Server 4.5 on Amazon Web Services)
I build the Amazon EC2 successfully.
In amazonpayments, the amazon show me an Activation Key.
On Application Activation:
The screen give me following information.
Generate an Amazon Activation Key
An activation key may be required as part of an application's registration process. If your application requires it, follow the steps below:
Step 1: Click on the Generate Key link to generate an activation key for an application.
Step 2: Copy the activation key.
Step 3: Click on Go to Application to access the application.
Step 4: Paste the activation key if and where the application specifies.
But in Adobe Flash Media Administration console, It is missing the License(Serial Key)
Does it need enter License(Serial Key)?
How can I use the Activation Key?

Hi,
This Activation Key is only for identification purposes. In most cases, you will not have to use it. Once you subscribe to FMS on AWS, you are ready to go and use FMS AMI's.
Also, FMS on AWS does NOT require any License or Key. It works on a separate Licensing model.
Thanks!

Exchange 2003 to 2010 Migration and Certificate Issue

Good Day All -
This is my first post on here, so if I post to the wrong spot or something is incorrect, please forgive and redirect me.
I have a small working knowledge of Exchange and even less about Certificates.
I did an Exchange 2003 to Exchange 2010 migration last weekend, and, for the most part, everything went well. Initially when users first launched Outlook for the first time, (post mailbox move), the received a Security Alert to install the Self-Signed
Certificate for the new Exchange Server. This was a one time deal and everything was good after that. Also, I exported the non-self-signed certificate, (for external mail, purchased from Network Solutions), from the Exchange 2003 Server, and imported
it into the Exchange 2010 Server. Again, no issue.
Jump ahead to today. It was brought to my attention that some mobile devices were unable to connect, and in my infinite wisdom ,<sarcasm>, I thought the issue had to do with the certificate(s). I started troubleshooting and it seems like I've
fixed the the mobile devices being able to connect, but now every time users launch Outlook, they receive the Security Alert for the non-self-signed certificate, over and over again. (or it just pops up while connected to Outlook)
They go through the motions of installing it, but it just keeps coming back.
I have referenced several articles on here, and other sites, but nothing has worked and I'm stuck and fried on this one.
http://support.microsoft.com/kb/940726/en-us
http://exchangeserverpro.com/how-to-issue-a-san-certificate-to-exchange-server-2010-from-a-private-certificate-authority/
Would someone please help. Thanks very much, (in advance).

Thanks for the reply. Yeah, I have read many articles, (especially from exchangeserverpro), and have learned alot, but I am definitely a cert novice here.
The cert "error" on my internal Outlook Clients is a Security Alert for
mylocalservername.mydomain.lcl. When I click to view this certificate it points to
webmail.mydomain.com, which is what the external
devices use for SSL verificartion.
I'm not understanding why my internal Outlook clients are prompting for this external certificate.
I have the self signed certificate that auto-installed with Exchange 2010, which points to the DNS Names:
mylocalservername.mydomain.lcl and mylocalservername. This was the server certificate that the Outlook clients installed after they launched Outlook post mailbox migration to the new Exchange
2010 server and everything was good internally.
For my external connection then, I exported the webmail.mydomain.com
from the old Exchange 2003 server, and imported it on the new Exchange 2010 server; (EMC\Server Configuration\Import Exchange Certificate (Actions Pane)). Ever since doing this, all Outlook clients, (2007 & 2010)
receive the Security Alert for mylocalservername.mydomain.lcl, but is for the
webmail.mydomain.com cert.
I have two certs on the Exchange 2010 server; one self signed and one not, (The non-self-signed purchased from a CA and thus the one I imported from Exchange 2k3).
The services assigned to the two certs are:
Self-Signed, (mylocalservername.mylocaldomain.lcl and
myservername):
IMAP, POP, SMTP
Non-Self-Signed, (webmail.mydomain.com, Purchased from CA)
IIS
Please let me know if there's anything glaring here that I'm missing, and if not, what you think the problem may be. Thanks very much.

Error connecting https when certificate key 2048

Hello,
I've got the following exception when I tried connecting an HTTPS web server AND when the certificate key > 2048 bits:
javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLProtocolException: java.io.IOException: subject key, Unknown key spec: Invalid RSA modulus size.
The exception occurs when trying to handshake the certificate:
com.sun.net.ssl.internal.ssl.HandshakeMessage$CertificateMsg.<init>
I tried using jdk 1.4.2_08 and 1.5.0.
Is somebody can help me? Is there a specific work around or library to use?
Thanks for your help
C�dric Braem
http://www.internetVista.com

hi ,
R/3 and EP are running in cross domains.
ex- R/3 india.ac,in:port/irj/portal
EP europe.ac.in:port/irj/portal
There is no web dispatcher for the portal and also for backend, there are no additonal SSL in the network
It is java webdynpro causing the issue when i am trying to access my backend system from portal from talent management.
A new iwndows appears with pop-up and poempts fro user id & password.
Thanks & regards,
rahul

I need a Solution Manager Key, please

Hello,
I'm running an HSC and need a solution manager key. Can anyone generate a key for me, please?
Hostname = FUJISAPD
System number = 01
Instance = R3Q
Thanks in advance.
Best Regards,
André Koji Honma
Support Analyst

Those keys MUST NOT be posted here.
Install a solution manager, you will need it because you won´t get any patches without it.
Markus

New install of SQL 2014 Std MSDN. Get "The SQL Server product key is not valid. To proceed, re-enter the product key values from the Certificate of Authenticity (COA) or SQL Server packaging."

Trying to install a new version of SQL 2014 Std 64 or x86. Installing on Windows 8.1Pro 64bit machine.
I get:
"TITLE: SQL Server Setup failure.
SQL Server Setup has encountered the following error:
The SQL Server product key is not valid. To proceed, re-enter the product key values from the Certificate of Authenticity (COA) or SQL Server packaging.
Error code 0x858C0017."
I looked at the summary log and that is the only error.
I made sure there were no other instances of SQL on this machine. Uninstalled all VS2013 and sql instances just in case. IF there is somewhere to check if a previous version or license is causing the issue, i would be glad to check.
Any help would be appreciated.

Hi,
Please read this thread with similar issue
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/bdd94577-515c-49fa-be44-008eacece057/installing-sql-server-2012-on-a-new-vm-error-code-0x858c0017?forum=sqlsetupandupgrade
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it
My Technet Articles

Does DPM 2012 R2 still needs DataSourceGroups.xml and MaxAllowedParallelBackups key when using Hyper-V VSS Software Writer to backup Server 2012 R2 Cluster

Hi,
Does DPM 2012 R2 still needs DataSourceGroups.xml and MaxAllowedParallelBackups key when using Hyper-V VSS Software Writer to backup Server 2012 R2 Hyper-V Cluster with CSV's? Can't find a clear answer somewhere.
Thanx for helping me out.
DJITS.

Configure CSV backups
If you are running Hyper-V on Windows Server 2008 R2 and you’re backing up multiple clusters with DPM, you need to ensure that only one backup uses the same CSV at any one time. To do this, follow the instructions in
Serialize virtual machine backups.
If you’re using software VSS with Hyper-V on Windows Server 2008 R2, do the following
Serialize virtual machine backups per node
Serialize virtual machine backups per CSV LUN
Have a nice day !!!

OIF-do I need to exchange certificate,keys if using selfsigned certificate?

Similar Messages

Maybe you are looking for