Migrate Active Directory Federation Services Role Services to Windows Server 2012

  • [アーティクル]

 

Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012

About this guide

This guide provides instructions to migrate the following role services to Active Directory Federation Services (AD FS) that is installed with Windows Server 2012:

  • AD FS 1.1 Windows token-based agent and AD FS 1.1 claims-aware agent installed with Windows Server 2008 or Windows Server 2008 R2

  • AD FS 2.0 federation server and AD FS 2.0 federation server proxy installed on Windows Server 2008 or Windows Server 2008 R2

Target audience

  • IT architects who are responsible for computer management and security throughout an organization

  • IT operations engineers who are responsible for the day-to-day management and troubleshooting of networks, servers, client computers, operating systems, or applications

  • IT operations managers who are accountable for network and server management

Supported migration scenarios

The migration instructions in this guide consist of the following tasks:

  • Exporting the AD FS 2.0 configuration data from your server that is running Windows Server 2008 or Windows Server 2008 R2

  • Performing an in-place upgrade of the operating system of this server from Windows Server 2008 or Windows Server 2008 R2 to Windows Server 2012

  • Recreating the original AD FS configuration and restoring the remaining AD FS service settings on this server, which is now running the AD FS server role that is installed with Windows Server 2012.

This guide does not include instructions to migrate a server that is running multiple roles. If your server is running multiple roles, we recommend that you design a custom migration process specific to your server environment, based on the information provided in other role migration guides. Migration guides for additional roles are available on the Windows Server Migration Portal.

Supported operating systems

Destination server operating system:

Windows Server 2012 or Windows Server 2008 R2 (Server Core and full installation options)

Destination server processor:

x64-based

Source server processor

Source server operating system

x86- or x64-based

Windows Server 2003 with Service Pack 2

x86- or x64-based

Windows Server 2003 R2

x86- or x64-based

Windows Server 2008, both full and Server Core installation options

x64-based

Windows Server 2008 R2

x64-based

Server Core installation option of Windows Server 2008 R2

x64-based

Server Core and full installation options of Windows Server 2012

Note

The versions of operating systems that are listed in the preceding table are the oldest combinations of operating systems and service packs that are supported. The Foundation, Standard, Enterprise, and Datacenter editions of the Windows Server operating system are supported as the source or the destination server. Migrations between physical operating systems and virtual operating systems are supported.

Supported AD FS role services and features

The following table describes the migration scenarios of the AD FS role services and their respective settings that are described in this guide.

From

To AD FS installed with Windows Server 2012

AD FS 1.0 federation server installed with Windows Server 2003 R2

Migration is not supported

AD FS 1.0 federation server proxy installed with Windows Server 2003 R2

Migration is not supported

AD FS 1.0 Windows token-based agent installed with Windows Server 2003 R2

Migration is not supported

AD FS 1.0 claims-aware agent installed with Windows Server 2003 R2)

Migration is not supported

AD FS 1.1 federation server installed with Windows Server 2008 or Windows Server 2008 R2

Migration is not supported

AD FS 1.1 federation server proxy installed with Windows Server 2008 or Windows Server 2008 R2

Migration is not supported

AD FS 1.1 Windows token-based agent installed with Windows Server 2008 or Windows Server 2008 R2

Migration on the same server is supported, but the migrated AD FS Windows token-based agent will function only with an AD FS 1.1 federation service installed with Windows Server 2008 or Windows Server 2008 R2. For more information, see:

Migrate the AD FS 1.1 Web Agents

Interoperating with AD FS 1.x

AD FS 1.1 claims-aware agent installed with Windows Server 2008 or Windows Server 2008 R2)

Migration on the same server is supported. The migrated AD FS 1.1 claims-aware web agent will function with the following:

AD FS 1.1 federation service installed with Windows Server 2008 or Windows Server 2008 R2

AD FS 2.0 federation service installed on Windows Server 2008 or Windows Server 2008 R2

AD FS federation service installed with Windows Server 2012

For more information, see:

Migrate the AD FS 1.1 Web Agents

Interoperating with AD FS 1.x

AD FS 2.0 federation server installed on Windows Server 2008 or Windows Server 2008 R2

Migration on the same server is supported. For more information, see:

Prepare to Migrate the AD FS 2.0 Federation Server

Migrate the AD FS 2.0 Federation Server

AD FS 2.0 federation server proxy installed on Windows Server 2008 or Windows Server 2008 R2

Migration on the same server is supported. For more information see:

Prepare to Migrate the AD FS 2.0 Federation Server Proxy

Migrate the AD FS 2.0 Federation Server Proxy

See Also

Prepare to Migrate the AD FS 2.0 Federation Server Prepare to Migrate the AD FS 2.0 Federation Server Proxy Migrate the AD FS 2.0 Federation Server Migrate the AD FS 2.0 Federation Server Proxy Migrate the AD FS 1.1 Web Agents