Presented at SharePoint TechFest on May 17, 2012. All rights reserved.

11. $rootCert = (Get-
SPCertificateAuthority).RootCertificate
$rootCert.Export("Cert") | Set-Content
"C:CertsEnterpriseServicesRootCert.cer" -
Encoding byte

12. $rootCert = (Get-SPCertificateAuthority).RootCertificate
$rootCert.Export("Cert") | Set-Content
"C:CertsInternetRootCert.cer" -Encoding byte
$stsCert = (Get-
SPSecurityTokenServiceConfig).LocalLoginProvider.SigningCertif
icate
$stsCert.Export("Cert") | Set-Content
"C:CertsInternetSTSCert.cer" -Encoding byte

13. $farmID = (Get-SPFarm).Id
New-Item C:CertsinternetConsumerFarmID.txt -type file -force -
value "$farmID“

14. Copy-Item $consumerc$CertsInternetConsumerFarmID.txt
$publisherc$Certs
Copy-Item $publisherc$CertsEnterpriseServicesRootCert.cer
$iconsumerc$Certs
Copy-Item $iconsumerc$CertsInternetRootCert.cer
$publisherc$Certs
Copy-Item $iconsumerc$CertsInternetSTSCert.cer
$publisherc$Certs

15. $trustCert = Get-PfxCertificate "C:certsInternetRootCert.cer"
New-SPTrustedRootAuthority Internet -Certificate $trustCert
$stsCert = Get-PfxCertificate "c:certsInternetSTSCert.cer"
New-SPTrustedServiceTokenIssuer Internet -Certificate $stsCert

16. $trustCert = Get-PfxCertificate
"C:CertsEnterpriseServicesRootCert.cer"
New-SPTrustedRootAuthority EnterpriseServices -Certificate
$trustCert

17. $farmID = Get-Content C:CertsInternetConsumerFarmID.txt
$security = Get-SPTopologyServiceApplication | Get-
SPServiceApplicationSecurity
$claimProvider = (Get-SPClaimProvider System).ClaimProvider

18. $principal = New-SPClaimsPrincipal -ClaimType
"http://schemas.microsoft.com/sharepoint/2009/08/claims/farmi
d" -ClaimProvider $claimProvider -ClaimValue $farmID
Grant-SPObjectSecurity -Identity $security -Principal $principal -
Rights "Full Control"
Get-SPTopologyServiceApplication | Set-
SPServiceApplicationSecurity -ObjectSecurity $security

20. http://technet.microsoft.com/en-us/magazine/hh528474.aspx