ADFS Upgrade

Keith Zimmer 1 Reputation point

I've upgraded and moved the DB from a 2012 SQL server to 2019 (retaining the same virtual pointer name), installed 2019 WAP server, uninstalled, then removed 2012 WAP server, installed 2019 ADFS server, and made the 2019 server the Primary server. When I attempt to upgrade (raise farm behavior) to 2019, I receive the error message shown below. I am a SQL SA on this server. What confuses me is the statement "Database upgrade could not be performed on localhost" (The SQL server is not local). I've generated the script to give to the DBA's to manually create the DB, but I'd really like to be able to do this as it was intended. Any help would be greatly appreciated

Invoke-AdfsFarmBehaviorLevelRaise : Database upgrade could not be performed on localhost. Error: Unable to connect to
the database. You may not have permission to create the AD FS configuration database in the specified SQL server. You
can do one of the following: (1) have the SQL administrator grant permissions to you to create the AD FS configuration
database in the specified SQL server or (2) have the SQL administrator create the AD FS configuration database by
running SQL scripts. Use the Export-ADFSDeploymentSQLScript to create the SQL scripts. After the SQL administrator
runs the scripts, try the command again specifying that the database is to be overwritten.
At line:1 char:1

  • Invoke-AdfsFarmBehaviorLevelRaise -Credential $cred
  • ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  • CategoryInfo : NotSpecified: (:) [Invoke-AdfsFarmBehaviorLevelRaise], RemoteException
  • FullyQualifiedErrorId : DeploymentTask,Microsoft.IdentityServer.Deployment.Commands.InvokeUpgradeFarmBehaviorCom
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,209 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Keith Zimmer 1 Reputation point

    I was able to perform the upgrade by granting the service account SA priv's on the DB, then using the service account to perform the upgrade instead of my Domain Admin account

    0 comments No comments