DC
Add-KdsRootKey -EffectiveTime (Get-Date).AddHours(-10)
New-ADServiceAccount -Name adfssvc -DNSHostName adfs.corp.com
SRV1
Install-WindowsFeature adfs-federation -IncludeManagementTools
copy \\192.168.0.1\C$\Users\Administrator\wildcard.pfx .
Import-PfxCertificate .\wildcard.pfx -CertStoreLocation Cert:\LocalMachine\My -Password (ConvertTo-SecureString "Skill39**" -AsPlainText -Force)
gpupdate /force
$thumb = Get-Item Cert:\LocalMachine\My\* | Where Subject -eq "CN=*.corp.com" | Select-Object -ExpandProperty Thumbprint
Install-AdfsFarm -CertificateThumbprint $thumb -FederationServiceName adfs.corp.com -GroupServiceAccountIdentifier CORP\adfssvc$ -FederationServiceDisplayName "CORP Federation" -OverwriteConfiguration
Add-AdfsRelyingPartyTrust -Name CORP -Metadataurl <https://adfs.corp.com/federationmetadata/2007-06/federationmetadata.xml>
SRV2
Install-WindowsFeature adfs-federation -IncludeManagementTools
copy \\192.168.0.1\C$\Users\Administrator\wildcard.pfx .
Import-PfxCertificate .\wildcard.pfx -CertStoreLocation Cert:\LocalMachine\My -Password (ConvertTo-SecureString "Skill39**" -AsPlainText -Force)
gpupdate /force
$thumb = Get-Item Cert:\LocalMachine\My\* | Where Subject -eq "CN=*.corp.com" | Select-Object -ExpandProperty Thumbprint
Add-AdfsFarmNode -PrimaryComputerName SRV1.corp.local -GroupServiceAccountIdentifier CORP\adfssvc$ -CertificateThumbprint $thumb -OverwriteConfiguration
Set-AdfsSyncProperties -PollDuration 10
Restart-Service adfssrv