Context

This document describes how to migrate farm ADFS install in Windows 2016 server operating system to Windows 2019 server operating system.

Environment

ADFS Farm

  • The ADFS farm is composed by:
    • Two ADFS servers:
      • ADFS01
      • ADFS02
    • One server WAP
    • One MS SQL server 2016

Requirements

To realize these operations, we need to have an account with enterprise admin privileges. Ensure ADFS service account has the administrative permissions on the SQL server and each server in the ADFS farm.We recommend to backup your environment with the official Microsoft tools before start this migration. Minimum 20 Go free space on system drive.

Migration plan

Upgrade operating system

In this first step, we upgrade operating system with upgrade in place mode. In this mode we just upgrade the operating system in place with new operating system server.

Comments Captures
Insert DVD of Windows server 2019 in the drive of the server
Double click on DVD drive to explore the content
Double click on setupe.exe file to launch upgrade

Select in the panel “Not right now”

Click on “Next” button

Add license key

Click on “Next” button

Select “GUI” installation mode

Click on “Next” button

Accept license terms
Select “Keep personal files and apps”

Click on “Next” button

Click on button “Confirm” to validate we need to setting AD FS service after upgrade
Click on button “Install”
The upgrade start

The progress of the installation take 30 minutes

Setup AD FS service

Comments Captures
After the update is completed, open a session on the server with an account with privileges Enterprise admin
In server manager console, launch “configure the federation service on this server”
Select “add a federation server to a federation server farm”

Click on “Next” button

Select the account with the enterprise admin privileges

Click on “Next” button

Select “Specify the database location for an existing farm using SQL Server”

Add “Database Host Name” and “Database instance”

Click on “Next” button

Select in drop menu the good communication certificate

Click on “Next” button

Add the account service for AD FS service and password

Click on “Next” button

Click on “Next” button
Verify if no issues

Click on “Configure” button

Click on “Close” button

Check AD FS service

To check if the service is started, retrieve event ID 100 in event viewer console

Check in AD FS mmc if you are connected to the service and verify if you retrieve all relaying party truts

Check the connection to the database

Deploy new DB on MS SQL Server

Export script to creation

Execute the following command:
Export-AdfsDeploymentSQLScript -DestinationFolder c:\temp -ServiceAccountName "ad\svc-adfs"
This command export two scripts with all command lines to create the new DB in V4.

Raise level of the farm

Ensure ADFS service account has the administrative permissions on the SQL server and each server in the ADFS farm.

From an ADFS server run Powershell in administrator mode and execute this command:
$creds = Get-Credential

Invoke-AdfsFarmBehaviorLevelRaise -Credential $creds

Take the database V3 offline

Set permission on database

Copy/paste the content of the second file “Setpermissions.sql” in MS SQL Management studio

Get current version of ADFS Farm

Upgrade the Configuration Version of existing WAP servers

Run the same action describes in chapter “Upgrade operating system”

Verify web application proxy configuration

Get-WebApplicationProxyConfiguration

Remove old database V3

Connect on MS SQL Server and open administration server SQL console.
Select the database name “ADFSConfigurationV3”, click right on the database and select “Delete”

Select “Close existing connections” and press on button “OK”

Go to explorer and brows path to the database file and log

Select files “ADFSConfigurationV3”, click right on them

Select in the dropdown menu “Delete”

Clean old installation of Windows server 2016

After upgrade operating system, a folder is created with the old OS. We need to delete this folder if the OS upgrade is validating.
To delete this folder, please execute these steps: