AD FS 2.0 Workshop – Installation prerequisites
This article is part of AD FS 2.0 Workshop – Complete High-availability platform
1. Installation Prerequisites
Before to install the AD FS 2.0 software, first we have to install some prerequisites.
1.1. Federation Servers
- Fully patch the servers
- Promote the Federation Servers as Domain Controllers (this part is out of the scope of this guide, so I won’t describe it here.)
- Create an AD FS domain service account (No need to add this account to any specific group, the required privileges will be granted, SeServiceLogonRight and the SeAuditPrivilege, to this account by the AD FS Initial Configuration Wizard)
- Install the latest .NET Framework (i.e. v4.5)
- Install IIS (Web-Server role)
Here we will use ‘FEDERATION\svc_adfs’
Import-Module ServerManager Add-WindowsFeature -Name Web-Server,Web-WebServer,Web-Common-Http,Web-Static-Content,Web-Default-Doc,Web-Dir-Browsing,Web-Http-Errors,Web-Http-Redirect,Web-App-Dev,Web-Asp-Net,Web-Net-Ext,Web-ASP,Web-CGI,Web-ISAPI-Ext,Web-ISAPI-Filter,Web-Health,Web-Http-Logging,Web-Log-Libraries,Web-Request-Monitor,Web-Http-Tracing,Web-Custom-Logging,Web-Security,Web-Basic-Auth,Web-Windows-Auth,Web-Client-Auth,Web-Cert-Auth,Web-Url-Auth,Web-Filtering,Web-IP-Security, Web-Performance,Web-Stat-Compression,Web-Mgmt-Tools,Web-Mgmt-Console,Web-Scripting-Tools,Web-Mgmt-Service,Web-Mgmt-Compat,Web-Metabase,Web-WMI,Web-Lgcy-Scripting,Web-Lgcy-Mgmt-Console,WAS,WAS-Process-Model
Well, luckily we are using Windows 2008 R2 so it is already installed! Instead of what we would have been stucked at the last step…
http://www.microsoft.com/en-us/download/details.aspx?id=17331
SQL Server Express Edition is enough. SQL Server is used only to store AD FS Artifact and configuration. Yes, that’s a SPOF; in an ideal world we would use a MSCS SQL server existing installation.
In order to eliminate this SPOF, here we’ll use 3 MS SQL Server Standard Edition instances to enable database mirroring.
http://www.microsoft.com/en-US/download/details.aspx?id=10909
http://support.microsoft.com/kb/2790338/en-us
1.2. Federation Server Proxies
- Fully patch the servers
- Install the latest .NET Framework (i.e. v4.5)
- Install IIS (Web-Server role)
Import-Module ServerManager Add-WindowsFeature -Name Web-Server,Web-WebServer,Web-Common-Http,Web-Static-Content,Web-Default-Doc,Web-Dir-Browsing,Web-Http-Errors,Web-Http-Redirect,Web-App-Dev,Web-Asp-Net,Web-Net-Ext,Web-ASP,Web-CGI,Web-ISAPI-Ext,Web-ISAPI-Filter,Web-Health,Web-Http-Logging,Web-Log-Libraries,Web-Request-Monitor,Web-Http-Tracing,Web-Custom-Logging,Web-Security,Web-Basic-Auth,Web-Windows-Auth,Web-Client-Auth,Web-Cert-Auth,Web-Url-Auth,Web-Filtering,Web-IP-Security, Web-Performance,Web-Stat-Compression,Web-Mgmt-Tools,Web-Mgmt-Console,Web-Scripting-Tools,Web-Mgmt-Service,Web-Mgmt-Compat,Web-Metabase,Web-WMI,Web-Lgcy-Scripting,Web-Lgcy-Mgmt-Console,WAS,WAS-Process-Model
Well, luckily we are using Windows 2008 R2 so it is already installed! Instead of what we would have been stucked at the last step…
http://www.microsoft.com/en-us/download/details.aspx?id=17331
http://www.microsoft.com/en-US/download/details.aspx?id=10909
http://support.microsoft.com/kb/2790338/en-us
allright, we’re done here. We can now procede to the installation.