Skip to content
English
  • There are no suggestions because the search field is empty.

Why did ADFS fail to start after updating the certificates?

Discover how incorrect certificate private key permissions can cause ADFS startup failures, trigger Event ID 7023 errors, and prevent the ADFS service from starting after certificate updates.

PROBLEM: When a new certificate was selected for service signing, token decrypting, and token signing, a restart of ADFS resulted in the ADFS service not starting with event ID 7023 reported in the System event log.

SOLUTION: Fixed by giving the ADFS_SVC account (service account) permissions to read the certificate’s private key using the certificate management snap-in on the ADFS Server. That is accessed via the “Manage Private Keys” option in the context menu for the certificate:

1