You have an Exchange Server 2013 organization that contains 10 servers.
You have a federation trust to the Microsoft Federation Gateway. The certificate in the trust relationship expires
soon.
You need to replace the certificate. The solution must minimize downtime.
You purchase a new certificate.
What should you do next?
A.
On all of the Exchange servers, import the certificate, and then run the New-FederationTrust cmdlet.
B.
On all of the Exchange servers, import the certificate, and then run the Set- OrganizationRelationship
cmdlet.
C.
On one of the Exchange servers, import the certificate, and then run the Set-FederationTrust cmdlet.
D.
On one of the Exchange servers, import the certificate, and then run the SetFederatedOrganizationldentifier cmdlet.
Explanation:
You can use the Set-FederationTrust cmdlet to manage the certificates used for the federation trust. You can
also use the Set-FederationTrust cmdlet to refresh the metadata document from the Microsoft Federation
Gateway and download its certificate.
Example:
This example configures the federation trust Microsoft Federation Gateway to use the certificate with the
thumbprint AC00F35CBA8359953F4126E0984B5CCAFA2F4F17 as the next certificate.
Set-FederationTrust -Identity “Microsoft Federation Gateway” -Thumbprint
AC00F35CBA8359953F4126E0984B5CCAFA2F4F17