Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. Server1 has the Active Directory Federation Services (AD FS) Federation Service role service installed…

Question

Options

• ABase-64 encoded X.509 (.cer)
• BCryptographic Message Syntax Standard PKCS #7 (.p7b)
• CDER encoded binary X.509 (.cer)
• DPersonal Information Exchange PKCS #12 (.pfx)

• A
  7% (2)
• B
  4% (1)
• C
  11% (3)
• D
  78% (21)

Explanation

If you are implementing a server farm of federation servers that share a single, exportable private key certificate that is issued by an enterprise certification authority (CA), the private key portion of the existing token-signing certificate must be exported to make it available for importing into the certificate store on the new server. (...) To export the private key of a token-signing certificate 1. Click Start, point to Administrative Tools, and then click Active Directory Federation Services. 2. Right-click Federation Service, and then click Properties. 3. On the General tab, click View. 4. In the Certificate dialog box, click the Details tab. 5. On the Details tab, click Copy to File. Microsoft 70-648 Exam 6. On the Welcome to the Certificate Export Wizard page, click Next. 7. On the Export Private Key page, select Yes, export the private key, and then click Next. 8. On the Export File Format page, select Personal Information Exchange = PKCS #12 (.PFX), and then click Next. (...) While initially setting up AD FS services, we would export the token-signing certificate to a DER file, but this is not what the scenario covers.

No community discussion yet for this question.