Installing the AD FS Server Role

Similar to other server roles discussed in this chapter, you can install AD FS from the Add Roles Wizard in Server Manager. The server must be running IIS with the Microsoft ASP.NET 2.0 and Microsoft .NET Framework 2.0 add-ons; the wizard asks you to install these if they are not present. Perform the following steps to install the AD FS server role:

1.	From the Roles node of Server Manager, select Add Roles, and bypass the Initial Configuration Steps page if this is presented.
2.	On the Select Server Roles page, select Active Directory Federation Services, and then click Next.
3.	The Introduction to AD FS page provides links to additional information from the Help and Support Center. Select these links to view additional information. You can return to the Add Roles Wizard at any time to continue the installation procedure.
4.	On the Select Role Services page shown in Figure 4.20, select the role services you want to install on this computer. Then click Next. Figure 4.20. The Add Roles Wizard enables you to install any or all of the role services used by AD FS. [View full size image]
5.	If IIS and the Windows Process Activation Service are not installed on the server, the wizard displays a dialog box that asks you to install these services. Click Add Required Roles Services to proceed.
6.	On the Choose a Server Authentication Certificate for SSL Encryption page, select an existing certificate if you have one. (This is the most secure option.) For learning purposes, it is sufficient to select the Create a Self-Signed Certificate for SSL Encryption option. Then click Next.
7.	The Choose a Token-Signing Certificate page presents the same options as the previous one. Make your selection, and then click Next.
8.	On the Specify Federation Server page, type the fully qualified domain name (FQDN) of your server, and then click Next. If you are installing the Federation Service role service, this is the name of the server you are working on; if you are installing the Federation Proxy role service or one of the web agent role services, this is the name of the Federation Service server.
9.	On the Select Trust Policy page, accept the default of Create a New Trust Policy unless you have an existing trust policy that you want to use. Then click Next.
10.	If you are also installing the Web Server (IIS) role, you receive the Introduction to Web Server (IIS) page. Click links on this page to obtain additional information about this role, and then click Next.
11.	Leave the default IIS role services selected, and then click Next.
12.	On the Confirm Installation Selections page, review the information to ensure that you’ve made the correct selections. If you need to make changes, click Previous. When ready, click Install.
13.	The wizard charts the progress of installation and displays a Results page when finished. Click Close.