Gentlemen, I have the following environment: Win2008 (AD DS, AD CS, AD FS) Win2008v2 (AD RMS, ADFS, AD FS Web) Vista (client joined the domain) After setting up AD FS in Win2008, exported the key to Win2008v2, and as I have an AD CS, I generated a new Web Server for the sertificado Win2008v2, and used this new certificate for setting up AD FS in Win2008v2 and enable the AD FS Web, so that when I go in AD FS server Win2008v2 to specify the certificate, it tells me it can not access the private key of the certificate that I generated via AD CS server itself. When I scored I generated the options of adding the network service for reading and exporting to accept the primary key. Anyone have any idea how to solve this permission problem?BrunoOliveiraBastos

Hello, for AD FS 2 please use http://social.msdn.microsoft.com/Forums/en-US/geneva/threads/Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.