Exporting the Certificates

  1. Export the token signing certificate from Access Manager.

    1. In Administration Console, click Devices > Identity Servers > Edit > Security.

    2. Under Keystores, click Signing.

    3. Under Certificates, click the certificate.

    4. Click Export Pubic Certificate, select DER File, and save the file.

    5. Make a note of where you have saved the certificate and copy this file to SharePoint Server for the later reference.

    6. Import this signing certificate into Internet Explorer on SharePoint Server, and export it in the DER format.

  2. Export the root certificate (and intermediates certificates if they exist) if it is different from the token signing certificate.

    1. Click Devices > Identity Servers > Edit > Security.

    2. Click NIDP Trust Store and select the required trusted root.

    3. Click Export Pubic Certificate, select DER File, and save the file.

    4. Make a note of the name and location of the file.

    5. Import this trusted root certificate and intermediate certificates into Internet Explorer on SharePoint Server, and then export it in the DER format.

  3. Export the server certificate from SharePoint Server.

    1. Open IIS Manager by clicking Start > Administrative Tools > Internet Information Services (IIS) Manager.

    2. Under Connections, select your server’s hostname and double-click Server Certificates.

    3. Export the server and trusted root certificates by highlighting the appropriate server and trusted root certificate and clicking View > Details > Copy to File > Next.

    4. While exporting the server certificate, keep the default value No, do not export the private key.

    5. Click Next. Keep the default format DER encoded binary X.509.

    6. Specify the name and location for the exported certificates and click Next > Finish > OK.

    7. Take a note of the name and location of the exported certificates. These certificates are used while configuring the service provider in Access Manager.