This is a test
Logon to the server running the Central Administration (VSrvSpA)
Copy the tokensign.cer you exported in the previous step to c:\ (of the current server)
Open the SharePoint 2010 Management Shell (powershell) and run the following powershell script
$cert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2(“c:\tokensign.cer”)
$map1 = New-SPClaimTypeMapping “http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname” -IncomingClaimTypeDisplayName “Login” -SameAsIncoming
$realm = “urn:sharepoint:intranet”
$signinurl = “https://logon.contoso.com/adfs/ls/”
$ap = New-SPTrustedIdentityTokenIssuer -Name “ADFS20″ -Description “ADFS 2.0 Federated Server” -Realm $realm -ImportTrustCertificate $cert -ClaimsMappings $map1 -SignInUrl $signinurl -IdentifierClaim $map1.InputClaimType
$uri = new-object System.Uri(https://mysite.contoso.com)
$ap.ProviderRealms.Add($uri, “urn:sharepoint:mysite”)
$ap.Update()

Once completed you can request your changes with the following command * get-SpTrustedIdentityTokenIssuer 12. Trusting Certificate Chain
In the example we used an certificate issued by an internal CA for the token signing. Because the SharePoint STS doesn’t trust the root of this CA we’ll need to add the Root certificate.
Get the root certificate from you’re internal CA and copy it to the c:\ of the SharePoint application server (VSrvSpa). Open the central administration website > Security > Manage Trust > Add
Give the Trust a name (contoso RootCA) and add the Root certificate from the c:\
Logon to the server running the Central Administration (VSrvSpA)
Copy the tokensign.cer you exported in the previous step to c:\ (of the current server)
Open the SharePoint 2010 Management Shell (powershell) and run the following powershell script
$cert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2(“c:\tokensign.cer”)
$map1 = New-SPClaimTypeMapping “http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname” -IncomingClaimTypeDisplayName “Login” -SameAsIncoming
$realm = “urn:sharepoint:intranet”
$signinurl = “https://logon.contoso.com/adfs/ls/”
$ap = New-SPTrustedIdentityTokenIssuer -Name “ADFS20″ -Description “ADFS 2.0 Federated Server” -Realm $realm -ImportTrustCertificate $cert -ClaimsMappings $map1 -SignInUrl $signinurl -IdentifierClaim $map1.InputClaimType
$uri = new-object System.Uri(https://mysite.contoso.com)
$ap.ProviderRealms.Add($uri, “urn:sharepoint:mysite”)
$ap.Update()

Once completed you can request your changes with the following command * get-SpTrustedIdentityTokenIssuer 12. Trusting Certificate Chain
In the example we used an certificate issued by an internal CA for the token signing. Because the SharePoint STS doesn’t trust the root of this CA we’ll need to add the Root certificate.
Get the root certificate from you’re internal CA and copy it to the c:\ of the SharePoint application server (VSrvSpa). Open the central administration website > Security > Manage Trust > Add
Give the Trust a name (contoso RootCA) and add the Root certificate from the c:\