I needed to change the certificate used by the FIM Service as the one I specified in the install wasn't valid. I couldn't find a reference to how to do this so came up with the method below - If someone knows an officially published/supported method please reply with a link to that instead. Open Certificates MMC for Local Computer - find new cert under Personal - Open On details tab scroll down to thumbprint. Copy thumbprint. Remove spaces Open regedt32 - locate HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FIMService\CertificateThumbprint Change value of key to thumbprint copied from cert details tab (without spaces) Restart FIM Service

You have found the place where the certificate we use is stored. The official way is to run a change install and select another certificate. /AndreasThis posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/copyright.htm

Thanks Andreas - wasn't sure if "change" install would leave everything else untouched (existing sync rules, workflows etc) - does it?

It will leave all other configuration untouched. Change install will behave as a fresh install and will only touch the parameters it asks for. /AndreasThis posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/copyright.htm