在驗證網站和管理入口網站之間重新建立信任

適用于：Windows Azure Pack

從 Windows Azure Pack 部署 中的任何虛擬機器執行下列腳本一次。 如需重新建立信任的詳細資訊，請參閱重新設定 Windows Azure Pack 中的 FQDN 和埠。

$MgmtStoreConnectionString="Data Source=$server;Initial Catalog=Microsoft.MgmtSvc.Store;User Id=sa;Password=$password"
$ConnectionString="Data Source=$server;User Id=$userid;Password=$password"
$TenantMetadataEndpoint="https://${AuthSiteLB}:$AuthSitePort/federationMetaData/2007-06/FederationMetadata.xml"
$AdminMetadataEndpoint="https://${WinAuthSiteLB}:$WinAuthSitePort/federationMetaData/2007-06/FederationMetadata.xml"

Set-MgmtSvcRelyingPartySettings -Target Tenant –MetadataEndpoint $TenantMetadataEndpoint  -DisableCertificateValidation -PortalConnectionString $PortalconnectionString  -ManagementConnectionString $MgmtStoreConnectionString
Set-MgmtSvcRelyingPartySettings -Target Admin –MetadataEndpoint $AdminMetadataEndpoint  -DisableCertificateValidation -PortalConnectionString $PortalconnectionString  -ManagementConnectionString $MgmtStoreConnectionString

$AdminSiteMetadataEndpoint="https://${AdminSiteLB}:$AdminSitePort/federationMetaData/2007-06/FederationMetadata.xml"
$TenantSiteMetadataEndpoint="https://${TenantSiteLB}:$TenantSitePort/federationMetaData/2007-06/FederationMetadata.xml"

Set-MgmtSvcIdentityProviderSettings -Target MemberShip –MetadataEndpoint  $TenantSiteMetadataEndpoint -ConnectionString $ConnectionString -DisableCertificateValidation
Set-MgmtSvcIdentityProviderSettings -Target Windows –MetadataEndpoint  $AdminSiteMetadataEndpoint -ConnectionString $ConnectionString -DisableCertificateValidation