Im getting an error as my xConnect certificate appears to have expired today! Im a little suspicious by those dates as it would appear to be valid from Feb 2018 to today. Does this sound possible and would I use SIF to create a new one?

enter image description here


2 Answers 2


Assuming it's expired you can easily create a new certificate using Windows Powershell by running the following command(so no need of SIF just for that part):

New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -DnsName "ClientStaging" -FriendlyName "Client Staging Self Signed" -NotAfter $([datetime]::now.AddYears(10))

Don’t worry about the DnsName — you can assign the cert to any host name.

This is for self-signed certificates. After you run that you will get the thumbprint of it, so just make sure you update the connection string and the AppSettings.config file, under the xconnect folder which is normally something like myxconnectroot\App_Config\AppSettings.config


You also need to add the xConnect App Pool user to the new certificate via Manage Computer Certificates MMC. Right-click on the new cert then > All Tasks > Manage Private Keys. Add the xConnect App Pool user there.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.