Installing AD FS High Cost Training

This video will look at installing an Active Directory Federation Server in the resource partner organization. Check out http://itfreetraining.com for more of our always free training videos. This is the organization that contains the applications that the user will access.

Download the PDF handout http://ITFreeTraining.com/handouts/fe...

In this video
In the previous video Active Directory Federation Services was installed and configured in the Account Partner Organization. This used an Enterprise CA to issue a certificate to be used with the Federation Server. In this video, a Standalone CA will be installed on the same server as Active Directory Federation Server is installed on. This is a simple setup. If you plan to install Active Directory Federation Services in your company you should perform additional research to ensure that the certificate install that you choose will meet the needs of your company. If you already have a Standalone CA set up on your network, you can use the steps in this video to create a certificate for use with the Federation Server.

Demonstration installing roles
In this demonstration two roles will be installed. The Certificate role and the Active Directory Federation Services role.
1) To add the roles, open Server Manager and then select the option on the welcome screen "Add roles and features".
2) If you are installing the roles on the local server, you can accept the default options until the wizard reaches the "Select server roles" screen.
3) On the "Select server roles" screen tick the option for the roles "Active Directory Certificate Services" and "Active Directory Federation Services" and press next.
4) There are no additional features that need to be install on the "Select features" screen so next can be pressed on this screen.
5) The next part of the wizard will display the welcome screen for certificate services. Once past this screen the wizard will ask which components of certificate services that you want to install. In this case, only the default component of "Certification Authority" needs to be selected.
6) The only screen that will be display for Active Directory Federation Services in the welcome screen. Once past this screen the install button can be pressed to start the install.

Demonstration of configuring the roles
1) Once the roles have finished installing, to configure them go into Server Manager and at the top of the screen on the right hand side will be an exclamation mark. Select this and then select the option "Configure Active Directory Certificate services on the destination server". This will launch the wizard to configure the server.
2) The first screen of the wizard will ask for a username and password to use with the wizard. The user account that is used needs to be a member of the domain administrators group.
3) On the next screen the components that are to be configured in the wizard need to be selected. In this case only the "Certification Authority" component was installed so this needs to be ticked and then the next button pressed.
4) On the "Setup Type" screen, the option for Standalone CA needs to be selected. In our previous video the Enterprise CA was installed.
5) On the "CA Type" the option for root CA needs to be selected. This means that this server is able to issue certificates without requiring any other CA's. If this CA was part of a hierarchy, you would need to select the second option of "Subordinate CA".
6) For the rest of the wizard the default options were selected. In a production environment you would want to go through these options and choose the best options for your network. For more information about these option see our certificate course.

Description to long for YouTube. Please see the following link for the rest of the description.
http://itfreetraining.com/federation#...

See    / itfreetraining   or http://itfreetraining.com for our always free training videos. This is only one video from the many free courses available on YouTube.

References
"Set up the lab environment for AD FS in Windows Server 2012 R2" http://technet.microsoft.com/en-us/li...