You have an Exchange Server 2013 organization that contains 10 servers.
You have a federation trust to the Microsoft Federation Gateway. The certificate in the trust
relationship expires soon.
You need to replace the certificate. The solution must minimize downtime.
You purchase a new certificate.
What should you do next?
A.
On all of the Exchange servers, import the certificate, and then run the New-FederationTrust
cmdlet.
B.
On all of the Exchange servers, import the certificate, and then run the SetOrganizationRelationship cmdlet.
C.
On one of the Exchange servers, import the certificate, and then run the Set-FederationTrust
cmdlet.
D.
On one of the Exchange servers, import the certificate, and then run the SetFederatedOrganizationldentifier cmdlet.
Explanation:
You can use the Set-FederationTrust cmdlet to manage the certificates used for the federation trust.
You can also use the Set-FederationTrust cmdlet to refresh the metadata document from the
Microsoft Federation Gateway and download its certificate.
Example:
This example configures the federation trust Microsoft Federation Gateway to use the certificate
with the thumbprint AC00F35CBA8359953F4126E0984B5CCAFA2F4F17 as the next certificate.
Set-FederationTrust -Identity “Microsoft Federation Gateway” -Thumbprint
AC00F35CBA8359953F4126E0984B5CCAFA2F4F17