ADFS 錯誤:無法為裝置註冊服務註冊 SSL 綁定:已新增具有相同金鑰的項目

ADFS 錯誤:無法為裝置註冊服務註冊 SSL 綁定:已新增具有相同金鑰的項目

我正在執行 Windows Server 2016 主動被動 ADFS 伺服器,即主 ADFS 伺服器ADFS01-VM已使用中的步驟設定良好https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/install-the-ad-fs-role-service

SSL SAN 憑證 *.domain.com 已匯入主伺服器上,沒有任何問題。

但是,轉到名為 ADFS02-VM 的輔助伺服器時,錯誤顯示如下: 在此輸入影像描述

我還執行了以下所述的步驟:https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/ad-fs-support-for-alternate-hostname-binding-for-certificate-authentication

在主 DFS 伺服器下ADFS01-VM

Set-AdfsAlternateTlsClientBinding -Member ADFS02-VM.DOMAIN.com -Thumbprint 'B6DA73B83A759DEE37F975668266FE92B4E5F788'

這是錯誤訊息:

Set-AdfsAlternateTlsClientBinding : 
PS0317: One or more of AD FS servers returned errors during execution of command 'Set-AdfsAlternateTlsClientBinding'. 
Error information: 
PS0316: AD FS Server: 'localhost', Error: 'The specified SSL certificate with thumbprint 'B6DA73B83A759DEE37F975668266FE92B4E5F788' does not meet the requirements for configuring alternate Tls Client binding. For more information see http://go.microsoft.com/fwlink/?LinkId=613586.'.
PS0316: AD FS Server: 'ADFS02-VM.DOMAIN.com', Error: 'The specified SSL certificate with thumbprint 'B6DA73B83A759DEE37F975668266FE92B4E5F788' does not meet the requirements for configuring alternate Tls Client binding. For more information see http://go.microsoft.com/fwlink/?LinkId=613586.'.
At line:1 char:1
+ Set-AdfsAlternateTlsClientBinding -Member ADFS02-VM.DOMAIN.com -Th ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Set-AdfsAlternateTlsClientBinding], RemoteException
    + FullyQualifiedErrorId : RuntimeException,Microsoft.IdentityServer.Management.Commands.SetAlternateTlsClientBinding

任何幫助將不勝感激。

相關內容