Migrating from Mixed Mode AD FS to a Full Windows Server 2016 AD FS Farm

Chiyo OdikaADFS, WINDOWS SERVERLeave a Comment

I recently designed a solution to provide AD FS high availability for a client, using Azure IaaS and PaaS. This necessitated deploying Windows Server 2016 AD FS servers to a Windows Server 2012 R2 farm in order to align with desired DR testing plan, and accommodate downtime schedules. This article will review the specific steps for making the cutover from a mixed mode AD FS environment to a full Windows Server 2016 AD FS farm. It will not go into detail about installing the AD FS roles.  At the time of writing this article, adding Windows Server 2016 AD FS servers to a Windows Server 2012 R2 farm in a so-called “mixed-mode” scenario is fully supported, and you can subsequently … Read More

Chiyo OdikaMigrating from Mixed Mode AD FS to a Full Windows Server 2016 AD FS Farm

Create a Certificate Template from a Server 2012 R2 CA

Chiyo OdikaWINDOWS SERVER4 Comments

In order to export the private key for a certificate, you will need to base the certificate on a template that has that option enabled. While this task can be easily accomplished using PowerShell, I’ll document a step by step using the GUI to show what this entails. Open Server Manager in your CA, click Tools, select Certificate Authority Select your CA, select and right-click Certificate Templates, and right-click Manage In the Certificate Templates Console, select the relevant Template Display Name (Web Server in my case), right-click and select Duplicate Template In the resulting Properties of New Template window, leave the default compatibility settings for backward compatibility with older clients Click on the General tab, and enter the Template display … Read More

Chiyo OdikaCreate a Certificate Template from a Server 2012 R2 CA

Certificate Private Key Error

Chiyo OdikaWINDOWS SERVERLeave a Comment

While working with certificates today, I stumbled upon an error that indicated something was amiss with my CA certificate templates. Ordinarily I make only certificate templates with exportable private keys available in my CA web enrollment pages, and I’d explicitly requested and installed the certificate with the thumbprint shown in the error below.   So I donned my sleuth knickers, and decided to delve a little deeper. An attempt to manually export the certificate with its private key from the certificate store indicated that there was no private key to be exported, as that option was greyed out     I identified the certificate template from which the certificate was created in the MMC | Certificates snap-in, and then reviewed … Read More

Chiyo OdikaCertificate Private Key Error