Anyone have a safe procedure for changing the STS certificate in SharePoint and K2?

  • 13 May 2015
  • 1 reply
  • 28 views

Badge +8

I'm prepping for hybrid SharePoint 2013 and Office 365. According to this article:

https://technet.microsoft.com/en-us/library/dn197169.aspx

 

I need to change out the STS certificate since the default one has a Certificate Authority that can't be verified. So once I swap it out, K2 will break. What's the procedure for makeing the appropriate changes in K2? Is it as simple as swapping out the Thumbprint from the ClaimIssuer table in the K2 database?


1 reply

Badge +10

Hi Doug,


 


It shouldn't be too difficult.  You also don't have to directly touch the databse.  


 


From what I understand, your STS URI is not changing, but the certificate for it is, therefore, the thumbprint will be different.  The short answer to your question is yes, however, there is a 'safer' and more supported way to do this via smartforms. See  https://help.k2.com/onlinehelp/k2blackpearl/icg/current/webframe.html#Claims_OAuth_Configuration.html for details on the forms available to do so.


 


Once your new cert is installed, you'll need the thumbprint from the sharepoint STS, which you can then update the appropriate issuer with from the form located at:


http://YourSmartFormsUrl.com/Runtime/Runtime/Form/Manage+Issuers/


 


To get the thumbprint of the STS certificate, check this section out: https://msdn.microsoft.com/en-us/library/office/gg318614%28v=office.14%29.aspx#determining


 


Let me know if there are any other questions!


 


Regards,


 


Mike

Reply