Page History

As Shibboleth requires a certificate and key to encrypt and decrypt attribute assertions, an X509 certificate must be installed for it to work. Now that the shibboleth2.xml file has been updated, use the keygen.bat command in C:\opt\shibboleth-sp\etc\shibboleth to create new certificates with the hostname(server name) and your SP entityID. Use the following format:

keygen.bat -h idmwebserver.cit.cornell.edu -e SP's entityID -y number of years to issue

where the values for each are substituted accordingly

keygen.bat -h idmwebserver.cit.cornell.edu -e shibtestsites.cit.cornell.edu -y 10

The 10 indicates the number of years for which the certificate is issued. You may specify a different value.