1. Open MMC, 650) This. width = 650; "Title =" clip_image003 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image003 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922364W8eb.jpg "" 454 "Height =" 312 "/> 2. Click file-add or delete a management unit. 650) This. width = 650; "Title =" clip_image004 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image004 "src =" http://img1.51cto.com/attachment/201409/17/126840_14109223651Wgy.png "" 320 "Height =" 267 "/> 3. Select a computer account 650) This. width = 650; "Title =" clip_image006 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image006 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922365ebDd.jpg "" 454 "Height =" 349 "/> 4. Select a local computer 650) This. width = 650; "Title =" clip_image008 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image008 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922365a9vt.jpg "" 454 "Height =" 389 "/> 5. Click OK. 650) This. width = 650; "Title =" clip_image010 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image010 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922366conB.jpg "" 454 "Height =" 352 "/> 6. Right-click the individual and click all tasks-apply for a new certificate 650) This. width = 650; "Title =" clip_image012 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image012 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922366Wi8r.jpg "" 454 "Height =" 312 "/> 7. click Next. 650) This. width = 650; "Title =" clip_image014 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image014 "src =" http://img1.51cto.com/attachment/201409/17/126840_14109223668Bob.jpg "" 454 "Height =" 328 "/> 8. click Next. 650) This. width = 650; "Title =" clip_image016 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image016 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922366Getn.jpg "" 454 "Height =" 331 "/> 9. Select SSL certificates and click Register 650) This. width = 650; "Title =" clip_image018 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image018 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922366NTxV.jpg "" 454 "Height =" 329 "/> 10. Click Finish 650) This. width = 650; "Title =" clip_image020 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image020 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922367FbyH.jpg "" 454 "Height =" 330 "/> 11. Apply for a certificate here and select ADFs. Click here to configure the settings. 650) This. width = 650; "Title =" clip_image022 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image022 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922367lztV.jpg "" 454 "Height =" 331 "/> 12. Enter the public name, adfs.superod.com, and click Add. 650) This. width = 650; "Title =" clip_image024 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image024 "src =" http://img1.51cto.com/attachment/201409/17/126840_141092236739s0.jpg "" 454 "Height =" 455 "/> 13. Added 650) This. width = 650; "Title =" clip_image025 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image025 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922367kN7q.png "" 454 "Height =" 497 "/> 14. Select DNS and enter the value adfs.superod.com and enterpriseregistration.superod.com. Click "OK ". 650) This. width = 650; "Title =" clip_image026 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image026 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922368Ca3M.png "" 454 "Height =" 502 "/> 650) This. width = 650; "Title =" clip_image027 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image027 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922368YilJ.png "" 454 "Height =" 500 "/> 15. Click to register 650) This. width = 650; "Title =" clip_image029 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image029 "src =" http://img1.51cto.com/attachment/201409/17/126840_14109223681uol.jpg "" 454 "Height =" 327 "/> 16. Successful 650) This. width = 650; "Title =" clip_image031 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image031 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922368uEJw.jpg "" 454 "Height =" 329 "/> 17. Start powershell as an administrator 650) This. width = 650; "Title =" clip_image032 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image032 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922368jAkD.png "" 356 "Height =" 211 "/> 18. Enter the following command: Add-kdsrooteky-inclutivetime (get-date) _ addhours (-10) 650) This. width = 650; "Title =" clip_image034 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image034 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922368rmXB.jpg "" 454 "Height =" 92 "/> New-adserviceaccount fsgmsa-dnshostname wcie-adfs.wcie.com-serviceprincipalnames HTTP/wcie-adfs.wcie.com 650) This. width = 650; "Title =" clip_image036 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image036 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922369b2RP.jpg "" 454 "Height =" 93 "/> Note: The domain name and computer name environment in the figure are different from those in this experiment. The above text is the main character. 19. Install the role ADFs after installation is complete. Click to configure the Federation server on this server. 650) This. width = 650; "Title =" clip_image038 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image038 "src =" http://img1.51cto.com/attachment/201409/17/126840_14109223695EdF.jpg "" 454 "Height =" 322 "/> 20. Open the ADFs Configuration Wizard and click Next. 650) This. width = 650; "Title =" clip_image040 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image040 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922369Kf3C.jpg "" 454 "Height =" 334 "/> 21. click Next. 650) This. width = 650; "Title =" clip_image042 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image042 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922369UJlt.jpg "" 454 "Height =" 333 "/> 22. Select administrator and click Next. 650) This. width = 650; "Title =" clip_image044 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image044 "src =" http://img1.51cto.com/attachment/201409/17/126840_14109223696TPt.jpg "" 454 "Height =" 332 "/> 23. Select an SSL Certificate, enter the name of the authenticator service: ADFs, and click Next. 650) This. width = 650; "Title =" clip_image046 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image046 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922369ppyW.jpg "" 454 "Height =" 334 "/> 650) This. width = 650; "Title =" clip_image048 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image048 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922370wQBC.jpg "" 454 "Height =" 334 "/> 24. Select to use an existing domain user account or a group to delegate a service account, and click "select". If not, create 650) This. width = 650; "Title =" clip_image050 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image050 "src =" http://img1.51cto.com/attachment/201409/17/126840_14109223706qvC.jpg "" 454 "Height =" 335 "/> 25. Select to use Windows internal database to create a database on this server, and click Next 650) This. width = 650; "Title =" clip_image052 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image052 "src =" http://img1.51cto.com/attachment/201409/17/126840_141092237005qi.jpg "" 454 "Height =" 334 "/> 26. click Next. 650) This. width = 650; "Title =" clip_image054 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image054 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922370utVY.jpg "" 454 "Height =" 335 "/> 27. Click Configure 650) This. width = 650; "Title =" clip_image056 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image056 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922371uFjf.jpg "" 454 "Height =" 333 "/> 28. Configuration successful 650) This. width = 650; "Title =" clip_image058 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image058 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922371KncI.jpg "" 454 "Height =" 332 "/> 29. Open the Add role and function wizard and select role-based or function-based Installation 650) This. width = 650; "Title =" clip_image060 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image060 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922371nBIp.jpg "" 454 "Height =" 323 "/> 30. Click Next 650) This. width = 650; "Title =" clip_image062 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image062 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922390vvTI.jpg "" 454 "Height =" 322 "/> 31. Check the Web server and click Next. 650) This. width = 650; "Title =" clip_image064 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image064 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922390hk1p.jpg "" 454 "Height =" 324 "/> 32. Click Next 650) This. width = 650; "Title =" clip_image066 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image066 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922390363c.jpg "" 454 "Height =" 322 "/> 33. Click Next 650) This. width = 650; "Title =" clip_image068 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image068 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922390Bpj2.jpg "" 454 "Height =" 320 "/> 34. click Next. 650) This. width = 650; "Title =" clip_image070 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image070 "src =" http://img1.51cto.com/attachment/201409/17/126840_14109223901JNv.jpg "" 454 "Height =" 323 "/> 35. click Next. 650) This. width = 650; "Title =" clip_image072 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image072 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922391pSiE.jpg "" 454 "Height =" 322 "/> 36. Start Installation 650) This. width = 650; "Title =" clip_image074 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image074 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922391MOcL.jpg "" 454 "Height =" 325 "/> 37. Installation Complete 650) This. width = 650; "Title =" clip_image076 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image076 "src =" http://img1.51cto.com/attachment/201409/17/126840_141092239138zX.jpg "" 454 "Height =" 324 "/> 38. In Server Manager, open IIS Manager 650) This. width = 650; "Title =" clip_image078 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image078 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922391h0XP.jpg "" 454 "Height =" 242 "/> 39. Select the default website and click bind. 650) This. width = 650; "Title =" clip_image080 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image080 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922391ZPJd.jpg "" 454 "Height =" 313 "/> 40. Click Add. 650) This. width = 650; "Title =" clip_image082 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image082 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922392Et5W.jpg "" 454 "Height =" 301 "/> 41. Select an SSL Certificate and click to View Details 650) This. width = 650; "Title =" clip_image083 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image083 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922392b8rX.png "" 454 "Height =" 307 "/> 42. Select the Details tab and confirm the Key Usage: 1.3.6.1.5.5.7.3.1 650) This. width = 650; "Title =" clip_image084 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image084 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922392JL7t.png "" 434 "Height =" 604 "/> 43. Click OK. 650) This. width = 650; "Title =" clip_image085 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image085 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922392Op92.png "" 454 "Height =" 301 "/> 44. Click Close. 650) This. width = 650; "Title =" clip_image087 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image087 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922393cCUQ.jpg "" 454 "Height =" 301 "/> 45. Run the following command in powershell: Initialize-addeviceregistration 650) This. width = 650; "Title =" clip_image089 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image089 "src =" http://img1.51cto.com/attachment/201409/17/126840_14109223939QO2.jpg "" 454 "Height =" 208 "/> 46. Enable-adfsdeviceregistration 650) This. width = 650; "Title =" clip_image091 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image091 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922393jVdi.jpg "" 454 "Height =" 252 "/> 47. Open ADFs Management 650) This. width = 650; "Title =" clip_image092 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image092 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922393jO0b.png "" 202 "Height =" 240 "/> 48. In ADFs management, select an authentication policy and click Edit global primary authentication. 650) This. width = 650; "Title =" clip_image094 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image094 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922394tD3L.jpg "" 454 "Height =" 364 "/> 49. Select exists: Form authentication, Intranet: Windows authentication, and enable device authentication. 650) This. width = 650; "Title =" clip_image095 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; display: inline "border =" 0 "alt =" clip_image095 "src =" http://img1.51cto.com/attachment/201409/17/126840_1410922394XVJV.png "" 454 "Height =" 543 "/> |