Managing Trusted Root Authorities for Claims Authentication in SharePoint 2010 Central Admin

I just thought I would create this post to raise awareness about another way to manage trusted root authorities in SharePoint 2010.  For those of you who have been doing claims authentication sites, you know that you need to add all of the certificates in the token signing certificate's chain into SharePoint's list of trusted sites.  All of the previous examples I've demonstrated in my blogs has done that through PowerShell.  To give equal coverage, I thought I would just let you all know that you can do the same thing in central administration - add, change and/or delete a trusted root authority for you token signing certificate chain.

To do this in central admin you need to go to Central Admin...Security...Manage Trust.  In that screen you will see all of the trusted root authorities that have been defined.  You can add or edit trusts by browsing for a certificate that SharePoint will upload use to establish a trust.  Just make sure you do not delete the "local" trusted certificate.  That is for SharePoint's own internal STS.

Comments (7)

  1. alexandrad9x says:

  2. Anonymous says:

    is there a way to do this programmatically?

  3. Steve says:

    So what do I do if it was revmoved?

  4. SDF says:

  5. Anonymous says:

    This is part 2 of a 5 part series on the CASI (Claims, Azure and SharePoint Integration) Kit.


  6. Anonymous says:

    I had been looking at Windows Azure Access Control Service (ACS) with an interesting eye recently, thinking

Skip to main content