Solved

ADFS 2.0 upgrade/migration ADFS 3.0

Posted on 2014-10-16
3
2,794 Views
Last Modified: 2014-10-16
Hi All

I'm hoping someone here can help me. We currently have ADFS 2.0 in place running in a NTLM cluster. We are using our ADFS environment in a hybrid environment for office 365 and various other cloud services  but I'm now looking at the possibility of upgrading to ADFS 3.0.

My current environment is setup as follows.
2x ADFS proxy servers configured with NTLM
2x ADFS server configured with NTLM
1x Dirsync server

The questions I have are:
1. It there a upgrade or migration option from ADFS 2.0 to ADFS 3.0?
2. If no upgrade/migration is it possible to install an ADFS 3.0 environment in the same local domain?

Many thanks in advance
0
Comment
Question by:TazzEE
  • 2
3 Comments
 
LVL 1

Accepted Solution

by:
RSayadi earned 500 total points
ID: 40384362
During the years I have learned to do a fresh install for these kind of migrations.
Note:
ADFS 2.0 = W2K8R2
ADFS 2.1 = W2K12
ADFS 3.0 = W2k12R2

In ADFS 3.0 there are a lot of changes. E.g. The proxy servers are replaced by WAP servers which have ADFS Proxy capability. But can do a lot more than that. Also there is no Stand alone installation possible. Therefore you have the option to install a new farm or ad a federation server to a existing farm.

I would do a fresh installation and decommission the 2.0 servers.  

Here is a great installation manual(Part 1,2,3):
http://blogs.technet.com/b/rmilne/archive/2014/04/28/how-to-install-adfs-2012-r2-for-office-365.aspx

Hope this helps
0
 

Author Comment

by:TazzEE
ID: 40384529
Hi RSayadi

Many thanks for the reply and I think the link has answered all of my follow up questions as well :)
The only thing I'm unclear about it when installing w2k12r2 ADFS server will I add it to the existing ADFS 2.0 farm or choose new?

thanks again for the great response!
0
 
LVL 1

Expert Comment

by:RSayadi
ID: 40384570
Hi TazzEE,

This is a trick question. I would choose a new farm and point it to the old database. But you have to take your farm naming into consideration. As the blog post states. "There can be only one"

If you have the freedom to choose a new name, choose a new farm installation. It will give you less issues.

Cheers,
Reza
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question