Warnings after installing ADFS

Question

Warnings after installing ADFS

Андрей Михалевский 3,426

Hello. I installed ADFS and got warnings. How critical are they? Which services does it interact with?

adfs01

The first warning is to restart the server - OK, I'll do it.

The second warning. My wildcard certificate was issued using the Active Directory Certificate Service*.LAB.COM

Did I understand correctly that I have to run a powershell commandlet to fix it?https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/ad-fs-support-for-alternate-hostname-binding-for-certificate-authentication

Set-AdfsAlternateTlsClientBinding -Member ADFS.lab.com -Thumbprint '<thumbprint of cert>' ?

The third warning:An error occurred during an attempt to set the SPN for the specified service account. Set the SPN for the service account manually. For more information about setting the SPN of the service account manually, see the AD FS Deployment Guide. Error message: The SPN required for this Federation Service is already set on another Active Directory account. Choose a different Federation Service name and try again.

Снимок

Accepted answer

0 additional answers

Your answer

Answer 1

Yanhong Liu 14,190 Microsoft External Staff

Hello，

Thank you for posting in Q&A forum.

This is a normal message after the installation is complete, it is just a warning, not an error. You can see at the top that the server has been successfully configured, so now you can use it after the system restarts.

User's image

I hope the information above is helpful.

Best Regards,

Yanhong Liu

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Андрей Михалевский 3,426 Reputation points

2024-08-02T08:14:29.8233333+00:00

Thanks, but I'd like to understand what these warnings affect. In what scenarios does it work
Yanhong Liu 14,190 Reputation points Microsoft External Staff

2024-08-06T05:49:52.4833333+00:00

Hello,

For you pic can't see the more info.

For the second question, maybe is cause by can't generate the certificate you can go to Certification Authority--Certificate Templates to check if there have any Templates name is Certauth.adfs.lab.com

For the last question,we will need the SPN In the Kerberos authentication flow. SPN is to let the DC and client to know which server have the service which client needs. If you can't set the SPN then it may will cause client can't find you by the SPN.

How the Kerberos Version 5 Authentication Protocol Works: Logon and Authentication | Microsoft Learn

To fixed it we need to know which SPN that we lack and then add it in the computer attribute ----servicePrincipalName

I hope the information above is helpful.

Best Regards,

Yanhong Liu

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Share via

Warnings after installing ADFS

0 additional answers

Your answer