One of the WAP server not working
Hy!
I have a two node ADFS farm (ADFS01 and ADFS02 servers) and also there are two node WAP cluster (WAP01 and WAP02 servers which are connected to the ADFS farm. There are some problem with the WAP01, it seems the trusted relationship with the ADFS farm has been broken. There are some error message in the Event Viewer under the ADFS log store (Applications and Services Logs/AD FS):
Event ID: 224
Value cannot be null.
Parameter name: proxyTrustCertificate
Event ID: 383
'.', hexadecimal value 0x00, is an invalid character. Line 10, position 1. (C:\Windows\ADFS\Config\microsoft.identityServer.proxyservice.exe.config line 10)
'.', hexadecimal value 0x00, is an invalid character. Line 10, position 1.
The microsoft.identityServer.proxyservice.exe.config file contain only this:
*<?xml version="1.0" encoding="utf-8"?>
<configuration>
<configSections>
<section name="microsoft.identityServer.proxyservice" type="Microsoft.IdentityServer.Management.Proxy.Configuration.ProxyConfiguration, Microsoft.IdentityServer.Management.Proxy, Version=10.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL" />
</configSections>
<microsoft.identityServer.proxyservice>
<congestionControl latencyThresholdInMSec="8000" minCongestionWindowSize="64"
enabled="true" connectionTimeoutInSec="120" />*
I think there should be more content.
I can not start the Web Application Proxy service:
Event ID in the WebApplicationProxy/Admin log store: 12016
The operation stopped due to an unknown general error. Error code 0x80075209.
Administrator
Get-WebApplicationProxyConfiguration
Event ID: 12025
The following information was included with the event:
(0x80072f0c)
There are some error in the System log:
Event ID: 7023
The Web Application Proxy Service service terminated with the following error:
A certificate is required to complete client authentication
I tried to restore the microsoft.identityServer.proxyservice.exe.config file, but it didn't resolve the problem.
I research about the possible solutions on the internet and find some information about the "Re-Establsih Proxy Trust":
What do you think about the solution? Will be the solution for me? Are there any negative impact for the working WAP02 and ADFS farm?
Thanks.