Often, we spin up virtual machines for development & testing purposes of Windows Azure Pack (as part of Team Access Control Resource Provider or other engagements). Typically we develop against an express deployment. One of the very time consuming process during development is to click on ‘continue to this website’ from the certificate validation error message while accessing admin portal & tenant portal. Since the portal automatically redirect to the authentication site, it also prompts for the same, which adds to the pain. 😦

There are two issues with the self-signed certificate.
1. It is not trusted
2. The subject name do not match the website

I am providing how we fix this on our development environment. I suggest this to be only used for development / test environments.

Step 1: Create a self-signed certificate with subject name matching website

Step 2: Add the new certificate as a trusted certificate authority

Step 3: Update bindings for sites to use the generated certificate (MgmtSvc-AdminSite, MgmtSvc-AuthSite, MgmtSvc-TenantSite, MgmtSvc-WindowsAuthSite)

Step 4: Restart IIS & Browser

You can download the PowerShell script referred to in this blog post from here. Hope this helps in improving your productivity. 🙂