Install-WebApplicationProxy

Install-WebApplicationProxy

Configures Web 应用程序代理 on the server.

语法

Parameter Set: Proxy
Install-WebApplicationProxy -CertificateThumbprint <String> -FederationServiceName <String> -FederationServiceTrustCredential <PSCredential> [-ForwardProxy <String> ] [-HttpsPort <Int32> ] [-TlsClientPort <Int32> ] [ <CommonParameters>]

详细说明

The Install-WebApplicationProxy cmdlet configures Web 应用程序代理 on the current server.

The FederationServiceName parameter specifies the Federation Service that provides authentication for Web 应用程序代理. The FederationServiceTrustCredential parameter specifies the Active Directory Federation Services (AD FS) identity that is authorized to register new Federation server proxies. The CertificateThumbprint parameter specifies the thumbprint of the certificate that Web 应用程序代理 uses to identify the server to users as a proxy for the Federation Service. You can also specify the name of a forward proxy, the HTTPS port for the Web 应用程序代理 server, and the port for the Transport Layer Security (TLS) client.

参数

-CertificateThumbprint<String>

Specifies the certificate thumbprint, as a string, of the certificate that Web 应用程序代理 presents to users to identify the Web 应用程序代理 as a proxy for the Federation Service. The thumbprint is 40 hexadecimal characters.

The certificate must be in the Personal store for the local computer. You can use a simple certificate, a subject alternative name (SAN) certificate, or a wildcard certificate.

-FederationServiceName<String>

Specifies the name of a Federation Service. This is the Federation Service for which Web 应用程序代理 provides AD FS proxy functionality and stores the configuration of the Federation Service.

-FederationServiceTrustCredential<PSCredential>

Specifies a PSCredential object that contains the credentials of the AD FS identity that is authorized to register new Federation server proxies. Specify an account that has permissions to manage the Federation Service.

To obtain a PSCredential object, use the Get-Credential cmdlet. For more information, type Get-Help Get-Credential.

-ForwardProxy<String>

Specifies the DNS name and port number of an HTTP proxy that this federation server proxy uses to obtain access to the federation service. Specify the value for this parameter in the following format: FQDN:PortNumber. For example, to specify a forward proxy with a host name of "proxy01" that is located within the corp.contoso.com domain and that can be reached using the HTTP port of 8080 would be "proxy-01.corp.contoso.com:8080". Note: This parameter applies only to Federation Services proxy. It does not apply for application publishing.

-HttpsPort<Int32>

Specifies the HTTPS port for the Web 应用程序代理 server. The default value is 443.

-TlsClientPort<Int32>

Specifies the port for the TLS client. Web 应用程序代理 uses this port for user certificate authentication. The default value is 49443.

<CommonParameters>

此 cmdlet 支持通用参数：-Verbose、-Debug、-ErrorAction、-ErrorVariable、-OutBuffer 和 -OutVariable。有关详细信息，请参阅 about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

输入

输入类型是指可通过管道传送给 cmdlet 的对象的类型。

输出

输出类型是 cmdlet 所发出对象的类型。

示例

Example 1: Configure Web Application Proxy on the server

This example configures Web 应用程序代理 on the local server.

The first command uses the Get-Credential cmdlet to create a credential, and then stores it in the $FScredential variable. The cmdlet prompts you for a user name and password. For more information, type Get-Help Get-Credential.

The second command configures Web 应用程序代理 on the local server. The command specifies the name of the Federation Service for which Web 应用程序代理 provides an AD FS proxy. The command specifies the thumbprint of the certificate that Web 应用程序代理 presents to users to identify the Web 应用程序代理 server as a proxy for the Federation Service.

PS C:\> $FScredential = Get-Credential

PS C:\> Install-WebApplicationProxy -FederationServiceName "FS01.Contoso.com" -FederationServiceTrustCredential $FScredential -CertificateThumbprint "0a1b2c3d0a1b2c3d0a1b2c3d0a1b2c3d0a1b2c3d"

相关主题

Add-WebApplicationProxyApplication

Get-WebApplicationProxyApplication

Get-WebApplicationProxyConfiguration

Set-WebApplicationProxyConfiguration