Instructions for updating the SSL Certificate used by CRM 2011 (Claims based and/or IFD environments)

One of my customers had to update their SSL certificate used by their CRM 2011 IFD environment. Below are the steps we took to apply the new SSL certificate –

1)      Add the new certificate to the ADFS server

1. Import the new certificate to the ADFS server
2. Grant the ADFS App Pool account “Full” permission to the new certificate
3. Also grant the CRM App Pool account “Read” permission to the new certificate
4. Bind the new certificate to the ADFS website

2)      Add the new certificate to the CRM Server

1. Import the new certificate to the CRM server
2. Grant the CRM App Pool account “Read” permission to the new certificate
3. Bind the new certificate to the CRM website

3)      Reconfigure Claims Based Authentication in Deployment Manager on the CRM Server to use the new certificate.

4)      On the ADFS server, update all the Relying Party Trusts used by CRM.

5)      Perform and IIS Reset on the ADFS and CRM servers.