ADFSv2 RC & IIS Certificates

(In which our heroine re-iterates that "It's always PKI".)

Tomek came across a fun behavior with certs during ADFSv2 RC setup, that I thought I would pass along to others. Short version, token-signing cert was the same cert that was being used for IIS binding, attempting to change it in the ADFS console without changing the associated IIS binding first produced the following:

The SSL certificate with thumbprint <thumbprint> is configured in IIS but could not be found in the Local Computer Personal certificate store.  SSL Certificates configured in IIS must also be present in the Local Computer Personal certificate store in order for AD FS 2.0 to use them.

Fix the IIS binding? Problem solved. Non-intuitive based on the error message, if you ask me.