First of all start by installing the new SSL on the computer-account on the Microsoft ADFS- and WAP-server. Do not mark the private key as exportable. Then open a PowerShell as administrator and check the thumbprint on the new SSL-cert by typing: dir Cert:\LocalMachine\My\ Copy the thumbprint on the new…