...
| Info | ||
|---|---|---|
| ||
All federation participants will transition to long-lived, self-signed certificates with 2048-bit keys by the end of 2012. A daily report and a raw data file of certificates in metadata will track our progress toward this goal throughout 2012. |
Any certificates you want to use with your SAML software are uploaded via the administrative interface. Typically only one certificate is required but multiple certificates may be uploaded and used as needed. For instance, multiple certificates may be used to facilitate the controlled rollover of expired certificates or certificates with weak keys. For recommended guidelines on the rollover process, refer to the Certificate Migration topic.
...