Export (0) Print
Expand All

Backing Up ADFS Components

Updated: September 13, 2007

Applies To: Windows Server 2003 R2

Backing up Active Directory Federation Services (ADFS) components to preserve a snapshot of ADFS state is critical for ensuring a recovery option in the event of lost data or hardware failure.

ADFS state is maintained in the following places:

  • TrustPolicy.xml file. The default location is %systemdrive%\adfs\sts.

  • Web.config and other files under %systemdrive%\ADFS\..., especially any customized Web pages (%systemdrive%\ADFS\sts\ls).

  • IIS metabase files (MetaBase.xml and MBSchema.xml) in %systemroot%\System32\Inetsrv (included in system state backup).

  • Windows registry (included in system state backup).

  • Custom transform module (.dll) or files related to the custom transform module.

Always back up system state on any federation server, federation server proxy, or Web server that you are backing up. System state contains the following components:

  • System startup (boot) files. These files are required for Windows Server 2003 to start.

  • System registry.

  • IIS settings.

  • Class registration database of component services. The Component Object Model (COM) is a binary standard for writing component software in a distributed systems environment.

  • Windows Clustering or Certificate Services, if installed.

Use the following table to identify components to back up on servers that are running ADFS components.

 

ADFS Component Running on Server Files and Components to Back Up

Federation Service

  • TrustPolicy.xml file

  • Web.config and other files under %systemdrive%E\ADFS\...

  • System state

  • Custom transform module (.dll) and related files, if any

Federation Service Proxy

  • Web.config and other files under %systemdrive%\ADFS\...

  • System state

ADFS Web Agent

  • %systemdrive%\ADFS\...

  • System state

noteNote
For a claims-aware application, ADFS settings are contained in the Web.config file. For a Windows NT token-based application, ADFS settings are contained in the IIS metabase files.

Task requirements

You need the following to perform the procedures for this task:

  • Backup software

To complete this task, perform the following procedures:

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft