I've managed to add a certificate to windows hello for signin to RDP.
However during testing i've generated a few faulty certificates, i would like to clean them up.
If i use certutil -delkey -csp "Microsoft Base Smart Card Crypto Provider" "ID" i get the message that the smartcard is read-only.
How can i clean up the certificates on the virtual smartcard provided by windows hello?
I have a bit of a weird situation, already contacted Microsoft support, but hoping sages here know something. We are planning a change of UPN for our 700+ users. We are in the process of testing what consequences this will bring. ( I know, a lot! :) )
Here is the test case:
I changed the UPN of a test user in the local AD, and synced it to AzureAD with AzureADConnect. I then checked that the user contains no references to the OLD upn. I then tried to use roll out an intune device for this user (Both an iPad and an Android device).
Intune seems in both cases to dig up the old UPN from somewhere for these fresh/new devices. Android device actually gets stuck in a loop because the old UPN is used for authentication while that obviously no longer works.
The iPad seems to work, but any certificate i deploy on the device seems to contain the old username + UPN...
As the title says: i have an AD FS server installed on windows server 2016. The server is installed in basic form, so console only, no gui.
I am working from a windows 10 pro machine. how do i get AD FS remote management tools? or can this role only be managed locally?