Retrive SAML Assertion signing certificate serial number from all realms

SecureAuth IdP Version affected:  All

Description:

This article explains how to retrieve a list of the SAML signing certificates in use by each realm.

Cause:  

When updating or performing an inventory of SAML Assertion signing certificates, it may be easiest to pull the signing certificate serial numbers for all realms, rather than looking through each realm's Post Authentication tab individually.

Resolution:

Decrypt all the web.config files from the admin console then use the following PowerShell command to pull the SAML Assertion signing certificate serial number from each realm's web.config file:

foreach($webconfig in (gci D:\SecureAuth\SecureAuth*\web.config)){write-host $webconfig.fullname $(Get-Content $webconfig | Select-String "sslSN")}

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.
Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.