Context
This document describes how to migrate farm ADFS install in Windows 2016 server operating system to Windows 2019 server operating system.
Environment
ADFS Farm
- The ADFS farm is composed by:
- Two ADFS servers:
- ADFS01
- ADFS02
- One server WAP
- One MS SQL server 2016
- Two ADFS servers:
Requirements
To realize these operations, we need to have an account with enterprise admin privileges. Ensure ADFS service account has the administrative permissions on the SQL server and each server in the ADFS farm.We recommend to backup your environment with the official Microsoft tools before start this migration. Minimum 20 Go free space on system drive.
Migration plan
Upgrade operating system
In this first step, we upgrade operating system with upgrade in place mode. In this mode we just upgrade the operating system in place with new operating system server.
Setup AD FS service
Check AD FS service
To check if the service is started, retrieve event ID 100 in event viewer console
Check in AD FS mmc if you are connected to the service and verify if you retrieve all relaying party truts
Check the connection to the database
Deploy new DB on MS SQL Server
Export script to creation
Execute the following command:
Export-AdfsDeploymentSQLScript -DestinationFolder c:temp -ServiceAccountName "adsvc-adfs"
This command export two scripts with all command lines to create the new DB in V4.
Raise level of the farm
Ensure ADFS service account has the administrative permissions on the SQL server and each server in the ADFS farm. |
From an ADFS server run Powershell in administrator mode and execute this command:
$creds = Get-Credential
Invoke-AdfsFarmBehaviorLevelRaise -Credential $creds
Take the database V3 offline
Set permission on database
Copy/paste the content of the second file “Setpermissions.sql” in MS SQL Management studio
Get current version of ADFS Farm
Upgrade the Configuration Version of existing WAP servers
Run the same action describes in chapter “Upgrade operating system”
Verify web application proxy configuration
Get-WebApplicationProxyConfiguration
Remove old database V3
Connect on MS SQL Server and open administration server SQL console.
Select the database name “ADFSConfigurationV3”, click right on the database and select “Delete”
Select “Close existing connections” and press on button “OK”
Go to explorer and brows path to the database file and log
Select files “ADFSConfigurationV3”, click right on them
Select in the dropdown menu “Delete”
Clean old installation of Windows server 2016
After upgrade operating system, a folder is created with the old OS. We need to delete this folder if the OS upgrade is validating.
To delete this folder, please execute these steps: