Consider the following scenarios:
- You install a proxy on a Windows Server 2012 R2-based Active Directory Federation Services (AD FS) server.
- You add a proxy trust certificate to the AD FS server.
- You disable automatic certificate rollover on the AD FS server.
- The certificate expires every 20 days, and the AD FS server renews the trust certificate.