Hello everyone. In today’s article I’ll quickly explain how to identify which WAP (Web Application Proxy) servers are configured in the AD FS farm using the Certificate Store and also PowerShell.
What are the WAP and AD FS trust certificates
The proxy trust certificate is used to ensure that external requests reaching AD FS are forwarded by trusted servers. AD FS controls which servers can send requests through certificates that are stored in an internal store called AdfsTrustedDevices. These certificates are generated by the WAP servers during the trust configuration process between the proxy servers and AD FS, and they are updated automatically.
In a scenario where the administrator has no prior knowledge of the AD FS environment, there are two simple ways to get information about the proxy servers that are part of the farm. They are:
Identifying WAP servers through the certificate store
The first way to identify a WAP server is by accessing the local certificate store on the AD FS server.
Let’s access the certificate store by running the certlm.msc command.
Let’s follow the steps below to identify which WAP servers serve my AD FS environment:
1 – Click AdfsTrustedDevices.
2 – Select Certificates.
3 – In the right-hand pane, we can see that we have only one WAP server, named WS2019-WAP, serving this AD FS farm.
Identifying WAP servers using PowerShell
You can also quickly identify which servers host the WAP service by running the command below from an AD FS server:
dir Cert:\LocalMachine\AdfsTrustedDevices | Where-Object { $_.Subject -like "CN=ADFS ProxyTrust*" }
We can see below that the command searches the same path we used in the previous step and returns the same information obtained earlier, but now via the command line:
Summary
In today’s quick article, I explained how to identify whether an AD FS farm has servers running the Web Application Proxy service and which servers host this service, using the Certificate Store and also PowerShell.
I hope this content has contributed to enriching your knowledge of AD FS.
Did you like the post? Like and share it. 🙂
If you have any suggestions or comments, let us know.
[ ]’s
Ulysses Neves
