I've deployed 2 ADFS Proxy servers in DMZ for load balance purposes with one adfs path from the internet, adfs-ext.company.com. I am getting the following error form one of the Proxy servers.
Log Name: AD FS 2.0/Admin
Source: AD FS 2.0
Date: 3/7/2016 11:33:15 PM
Event ID: 275
Task Category: None
Level: Error
Keywords: AD FS
User: NETWORK SERVICE
Computer: USCO09WS5006
Description:
The federation server proxy could not establish a trust relationship for the SSL secure channel with the Federation Service adfs-ext.company.com.
Error Message:
*************
Could not establish trust relationship for the SSL/TLS secure channel with authority 'adfs-ext.company.com'.
User Action
Ensure that the SSL certificate for Federation Service 'adfs-ext.company.com' is valid and trusted by the federation server proxy.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="AD FS 2.0" Guid="{20E25DDB-09E5-404B-8A56-EDAE2F12EE81}" />
<EventID>275</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000001</Keywords>
<TimeCreated SystemTime="2016-03-08T06:33:15.744684200Z" />
<EventRecordID>1473</EventRecordID>
<Correlation />
<Execution ProcessID="1936" ThreadID="7088" />
<Channel>AD FS 2.0/Admin</Channel>
<Computer>USCO09WS5006</Computer>
<Security UserID="S-1-5-20" />
</System>
<UserData>
<Event xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://schemas.microsoft.com/ActiveDirectoryFederationServices/2.0/Events">
<EventData>
<Data>adfs-ext.onsemi.com</Data>
<Data>Could not establish trust relationship for the SSL/TLS secure channel with authority 'adfs-ext.company.com'.</Data>
</EventData>
</Event>
</UserData>
</Event>
**********************
When Running the configuration wizard, it was able to establish trust with the ADFS server but only for a moment, and then it would break. This is shown in the event logs trail. I've tried reloading the CERT from the working proxy server, to no avail. FYI, this had been working for a while but only recently did it failed without any alert. Any advise to troubleshoot further is deeply appreciated.
Let me know if any further info is required.
Regards
Norishaam
