Hotfix enables AD FS token replay protection for Web Application Proxy authentication tokens in Windows Server 2012 R2

View products that this article applies to.

This article describes a hotfix that enables Active Directory Federation Services (AD FS) token acceptance window for Web Application Proxy (WAP) authentication tokens in Windows Server 2012 R2. Before you apply this hotfix, notice that this hotfix has a prerequisite. If you want to know how to enable the setting, see the details in more information.

↑ Back to the top

About this hotfix

When a WAP authentication token is obtained by a client, the token is included as a query string of the redirect URL back to WAP. This authentication token is valid for the time as prescribed by AD FS server and the URL contains the token. If a user accidentally shared a URL that contains their token with other users, WAP will authorize the other users in the context of the user to whom the token is issued.

After you install this hotfix, this issue can be reduced by setting the authentication token acceptance window limit at WAP by using the new cmdlet parameter.

↑ Back to the top

Hotfix information

Important Do not install a language pack after you install this hotfix. If you do, the language-specific changes in the hotfix will not be applied, and you will have to reinstall the hotfix. For more information, see Add language packs to Windows.

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix Download Available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website:

http://support.microsoft.com/contactus/?ws=support

Note The "Hotfix Download Available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, you must have April 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 (2919355) installed in Windows Server 2012 R2.

Registry information

To use the hotfix in this package, you do not have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.

File information

The global version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows Server 2012 R2 file information and notes

Important Windows 8.1 hotfixes and Windows Server 2012 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 8.1/Windows Server 2012 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

Version Product Milestone Service branch
6.3.960 0.17xxx Windows Server 2012 R2 RTM GDR
The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information" section. MUM, MANIFEST, and the associated security catalog (.cat) files, are very important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

Version	Product	Milestone	Service branch
6.3.960 0.17xxx	Windows Server 2012 R2	RTM	GDR

For all supported x64-based versions of Windows Server 2012 R2

File name	File version	File size	Date	Time	Platform
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:12	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:37	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:05	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:37	Not applicable
Appproxypsprovider.mfl	Not applicable	34,594	04-Mar-2015	06:05	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:37	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	05:59	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:20	Not applicable
Appproxypsprovider.mfl	Not applicable	38,868	04-Mar-2015	05:59	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:56	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:00	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:37	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:00	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:25	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	03:52	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	12:31	Not applicable
Appproxypsprovider.mfl	Not applicable	37,210	04-Mar-2015	06:00	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:56	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	05:59	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:37	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:12	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:41	Not applicable
Appproxypsprovider.mfl	Not applicable	36,168	04-Mar-2015	06:12	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:38	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:12	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:40	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:12	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:40	Not applicable
Appproxypsprovider.mfl	Not applicable	34,696	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:56	Not applicable
Appproxypsprovider.mfl	Not applicable	36,274	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:42	Not applicable
Appproxypsprovider.mfl	Not applicable	25,988	04-Mar-2015	06:12	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:42	Not applicable
Appproxypsprovider.mfl	Not applicable	26,692	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:42	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:37	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:37	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:37	Not applicable
Appproxypsprovider.mfl	Not applicable	36,876	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:38	Not applicable
Appproxypsprovider.mfl	Not applicable	37,206	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:38	Not applicable
Appproxypsprovider.mfl	Not applicable	35,942	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:38	Not applicable
Appproxypsprovider.mfl	Not applicable	36,600	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:50	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:40	Not applicable
Appproxypsprovider.mfl	Not applicable	35,854	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:49	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:40	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:40	Not applicable
Appproxypsprovider.mfl	Not applicable	34,478	04-Mar-2015	06:11	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	922	22-Aug-2013	19:19	Not applicable
Appproxypsprovider.mfl	Not applicable	33,526	04-Mar-2015	06:05	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:48	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:05	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:45	Not applicable
Appproxypsprovider.mfl	Not applicable	35,736	04-Mar-2015	06:05	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:46	Not applicable
Appproxypsprovider.mfl	Not applicable	34,462	04-Mar-2015	06:05	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:45	Not applicable
Appproxypsprovider.mfl	Not applicable	22,744	04-Mar-2015	06:05	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:30	Not applicable
Appproxypsprovider.mfl	Not applicable	23,640	04-Mar-2015	06:05	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:30	Not applicable
Appproxypsprovider.mfl	Not applicable	23,640	04-Mar-2015	06:05	Not applicable
Appproxypsprovider_uninstall.mfl	Not applicable	920	22-Aug-2013	19:30	Not applicable
Webappproxycontroller.exe	6.3.9600.17719	287,232	04-Mar-2015	02:00	x64
Appproxy.exe	6.3.9600.17719	1,143,808	04-Mar-2015	02:02	x64
Appproxypsprovider.dll	6.3.9600.17719	404,480	04-Mar-2015	02:04	x64
Appproxypsprovider.mof	Not applicable	12,060	24-Feb-2015	23:10	Not applicable
Appproxypsprovider_uninstall.mof	Not applicable	1,442	25-Jun-2013	02:22	Not applicable
Cim_webapplicationproxyapplication_v1.0.cdxml	Not applicable	16,995	10-Jan-2015	02:26	Not applicable
Cim_webapplicationproxyavailableadfsrelyingparty_v1.0.cdxml	Not applicable	1,100	18-Jun-2013	14:54	Not applicable
Cim_webapplicationproxyconfiguration_v1.0.cdxml	Not applicable	4,384	24-Feb-2015	23:10	Not applicable
Webapplicationproxy.format.ps1xml	Not applicable	3,131	25-Jun-2013	02:22	Not applicable
Webapplicationproxy.psd1	Not applicable	2,274	25-Jun-2013	02:22	Not applicable
Webapplicationproxy.psm1	Not applicable	617	18-Jun-2013	14:54	Not applicable
Webapplicationproxy.types.ps1xml	Not applicable	421	25-Jun-2013	02:22	Not applicable
Microsoft.identityserver.applicationproxy.authnzlib.exe	6.3.9600.17719	51,712	05-Mar-2015	05:39	x64
Microsoft.identityserver.applicationproxy.authnzlib.tlb	Not applicable	7,740	11-Apr-2014	02:04	Not applicable

Additional file information

Additional file information for Windows Server 2012 R2

Additional files for all supported x64-based versions of Windows Server 2012 R2

File property	Value
File name	Amd64_01ca5e1ae555c977f348641845a401c9_31bf3856ad364e35_6.3.9600.17719_none_d46c815be3437656.manifest
File version	Not applicable
File size	725
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_12f430e5f8e0ec2609e377f001403c9d_31bf3856ad364e35_6.3.9600.17719_none_6b4fec71cb21f6b4.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_151a2060451ced1efcca8aa9b6237de5_31bf3856ad364e35_6.3.9600.17719_none_80e5c3e6201edf12.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_1989a2f11f6511f576bd6d7bf8a5ab3d_31bf3856ad364e35_6.3.9600.17719_none_d7c53487c06a0f02.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_1d75d16ee6ce1572acc48b82e3190921_31bf3856ad364e35_6.3.9600.17719_none_00de0baa05c4e332.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_1e2d64113633b3e5110030d7d7eebed9_31bf3856ad364e35_6.3.9600.17719_none_af43c4763fa03ac3.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_279cf35dcd7907bff6f7921ad454ca2f_31bf3856ad364e35_6.3.9600.17719_none_58436f1e7f7b2dc8.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_286727e5895762f99aac26bc6b5b800a_31bf3856ad364e35_6.3.9600.17719_none_00d3b22616d246a5.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_2a83f47c17aa2d12d494140b7d55139e_31bf3856ad364e35_6.3.9600.17719_none_67a7ecda5441f330.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_2aed489e29f98871a6f5c988b3ff52e8_31bf3856ad364e35_6.3.9600.17719_none_1d269605776822d3.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_3408166a64d6fe3c0a39892e749394aa_31bf3856ad364e35_6.3.9600.17719_none_2b0ebb6c6a4eedff.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_3b3baff624599e20fc7217893183f2fe_31bf3856ad364e35_6.3.9600.17719_none_77d3c1a4d8e71f64.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_3b9f04618c8fe8c6339dd3cbb95d19b8_31bf3856ad364e35_6.3.9600.17719_none_57b0adfd71d66c9b.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_41fc6f0419c693cc367a3798e1af0453_31bf3856ad364e35_6.3.9600.17719_none_45829dec507bb660.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_5ad249ee6d5b4ab5ee64b72f3f93de25_31bf3856ad364e35_6.3.9600.17719_none_492d21f45f623e5a.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_5be9143918478c019034ef9a648e659f_31bf3856ad364e35_6.3.9600.17719_none_c9dd7987999c94f4.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_5c2629e4fcc24c497bc8157b82bd2b0b_31bf3856ad364e35_6.3.9600.17719_none_2473d2ddc2837bc1.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_5ceeba51185ddffe0470e68beaae5ec4_31bf3856ad364e35_6.3.9600.17719_none_1f1f79797cc19d07.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_5f7470bca659254da33cabb7caef68e0_31bf3856ad364e35_6.3.9600.17719_none_2bf5216c451243a8.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_601889671f60a05bdd0d62f6d0e0ed5b_31bf3856ad364e35_6.3.9600.17719_none_cbc37353f23a812b.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_6163553f57e0b277e80dd360fb94a4f9_31bf3856ad364e35_6.3.9600.17719_none_501a8f58acd3e1f7.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_62ff31986686657b784803bc06399b69_31bf3856ad364e35_6.3.9600.17719_none_8e7af283fba4f3e4.manifest
File version	Not applicable
File size	719
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_64925ef268ad8b693462279bde60b12e_31bf3856ad364e35_6.3.9600.17719_none_8ea0ff6634b9c955.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_67ff1f900c16e1b0fdf7846dbe4e7432_31bf3856ad364e35_6.3.9600.17719_none_4eafee6d85919b78.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_71237e49beccc5f15343d23a7cc4df54_31bf3856ad364e35_6.3.9600.17719_none_e95a0cad5e615c35.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_77c2fe74d24923649b7014f56d55fde0_31bf3856ad364e35_6.3.9600.17719_none_b9eef4881fdd669c.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_7fa2677b46c92894647d1cf0672711e7_31bf3856ad364e35_6.3.9600.17719_none_7c642528d46c9e42.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_853d6423a7901cac716b0dd6fbb0cd9e_31bf3856ad364e35_6.3.9600.17719_none_bd119ecef225fbe3.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_889f5db2629ded8e2f57dea893371dcc_31bf3856ad364e35_6.3.9600.17719_none_af181ae77dee2926.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_88c43a46809d2523ae73ba8911a89565_31bf3856ad364e35_6.3.9600.17719_none_f3e5a173531c353c.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_8c0460544fd47efe183c4bb24e205ce9_31bf3856ad364e35_6.3.9600.17719_none_6ed5eb05c0ed40f7.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_96243a03fe0fa8ac00425b936a9466d3_31bf3856ad364e35_6.3.9600.17719_none_54665bac367699d8.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_963ef940afd7bf7ca590468c2132816a_31bf3856ad364e35_6.3.9600.17719_none_c2c049cc1af5d930.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_98dad98d9ca07fc7f858ec87f8a7a001_31bf3856ad364e35_6.3.9600.17719_none_f6bc0f5e6f9cb62f.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_9b94d6fb14a7b9042d97958165b8e2b7_31bf3856ad364e35_6.3.9600.17719_none_26957aaff88ad72e.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_9c587ade910e8bf0053761a6a8135460_31bf3856ad364e35_6.3.9600.17719_none_b21051916ed955bc.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_a338ed536b50549bd1bec3cb069f12fc_31bf3856ad364e35_6.3.9600.17719_none_db58a47185acc781.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_a7fc59c84424909d486b331181dcd3fa_31bf3856ad364e35_6.3.9600.17719_none_07a293acdc968f18.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_a991a9e1bd4c7141db50600ee356a11e_31bf3856ad364e35_6.3.9600.17719_none_c391d609b5c7389d.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_aa2c3ba6c139c8ec9c249b079827b56e_31bf3856ad364e35_6.3.9600.17719_none_a05fed357564d47c.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_ab6fb513dcb753a2cdb875aaf92e242b_31bf3856ad364e35_6.3.9600.17719_none_445808c488df48f2.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_afe54fa8860cab46c726d0b648340560_31bf3856ad364e35_6.3.9600.17719_none_ee37ace946af7e80.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_b69ca476f6e1fb437720e8e804af7796_31bf3856ad364e35_6.3.9600.17719_none_b2c21cb63064ad37.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_bcae8387e950130416898ca1fb6767b5_31bf3856ad364e35_6.3.9600.17719_none_ad272510f575f630.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_c7acf2ab8b39055b84ac19ab2503611a_31bf3856ad364e35_6.3.9600.17719_none_2f4e29ca58994ba9.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_ca90d681def9b5129453166a97642729_31bf3856ad364e35_6.3.9600.17719_none_f3b8093c0905c0bd.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_ce2ceb47a352863c05b07a0156e4b3ed_31bf3856ad364e35_6.3.9600.17719_none_b92759f6bd1a1c34.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_cefc9c295f609816ae9f122a79df36db_31bf3856ad364e35_6.3.9600.17719_none_869477dd9f9573bf.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_d6ee0afe593011dcdde2d56d96970bb5_31bf3856ad364e35_6.3.9600.17719_none_320470c9faeafcd8.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_e241bfbd3e81077ec63a0c3d7aed4cc2_31bf3856ad364e35_6.3.9600.17719_none_ec308339a13d0e5e.manifest
File version	Not applicable
File size	738
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_e6aa57ac9baa259de47c89aff5c4659f_31bf3856ad364e35_6.3.9600.17719_none_b03406906dd62367.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_e856d85630c3f8e9dd9bd9784f357c46_31bf3856ad364e35_6.3.9600.17719_none_e45b1ecbeb314f09.manifest
File version	Not applicable
File size	1,465
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_ea3ad90d4f37bbc027de2dba2691597a_31bf3856ad364e35_6.3.9600.17719_none_ba2e0aa5e37ed4b3.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_fb172c033b21170a6afd3898a33a5ef6_31bf3856ad364e35_6.3.9600.17719_none_87a684263b2a556e.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_fb1ec16718b01436bd0f70f248471356_31bf3856ad364e35_6.3.9600.17719_none_6687d50dea877f91.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_fb6a4e801a395a7f6e565622dd0c141e_31bf3856ad364e35_6.3.9600.17719_none_f9da50be816e14d4.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_fd2950696ee086fb1afd5a61078fefee_31bf3856ad364e35_6.3.9600.17719_none_705165539557d046.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_fdc90016ba4a452452ca3cfc00bd39c8_31bf3856ad364e35_6.3.9600.17719_none_5c0f8418937d80e3.manifest
File version	Not applicable
File size	727
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_fe7ee39f0d514ffded126d0d5c478928_31bf3856ad364e35_6.3.9600.17719_none_baa2884a9deb0d46.manifest
File version	Not applicable
File size	733
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable
File name	Amd64_microsoft-windows-w..bappproxycontroller_31bf3856ad364e35_6.3.9600.17719_none_62fe34facbcddfd9.manifest
File version	Not applicable
File size	7,056
Date (UTC)	04-Mar-2015
Time (UTC)	04:04
Platform	Not applicable
File name	Amd64_microsoft-windows-w..cationproxy-service_31bf3856ad364e35_6.3.9600.17719_none_c82ab720507a1117.manifest
File version	Not applicable
File size	3,552
Date (UTC)	04-Mar-2015
Time (UTC)	04:04
Platform	Not applicable
File name	Amd64_microsoft-windows-w..oxy-instrumentation_31bf3856ad364e35_6.3.9600.17719_none_37a7e96603d57926.manifest
File version	Not applicable
File size	130,405
Date (UTC)	04-Mar-2015
Time (UTC)	04:04
Platform	Not applicable
File name	Amd64_microsoft-windows-w..proxy-wmiv2provider_31bf3856ad364e35_6.3.9600.17719_none_af4bb49dbfd17200.manifest
File version	Not applicable
File size	11,871
Date (UTC)	04-Mar-2015
Time (UTC)	04:04
Platform	Not applicable
File name	Amd64_microsoft-windows-w..tionproxy-authnzlib_31bf3856ad364e35_6.3.9600.17719_none_add7c24df470ad91.manifest
File version	Not applicable
File size	14,596
Date (UTC)	05-Mar-2015
Time (UTC)	05:47
Platform	Not applicable

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

More Information

After this hotfix is installed, you will have to set the new ADFSTokenAcceptanceDurationSec parameter in the Web Application Proxy configuration to enable the new acceptance window functionality. For example, to set a 60 second acceptance window, you would run the following PowerShell cmdlet:

Set-WebApplicationProxyConfiguration -ADFSTokenAcceptanceDurationSec:60

This setting determines the time in seconds within which WAP will accept the token issued by AD FS and presented back by the client. Setting ADFSTokenAcceptanceDurationSec to zero will revert to the default behavior that has no acceptance window applied. The maximum value that can be set is 3,600 (one hour). You can check the value of the setting by using the following PowerShell cmdlet:

Get-WebApplicationProxyConfiguration

Notes

This is a global Web Application Proxy setting and will apply to all publishing rules where authentication is required. It does not affect the token lifetime after the token is transitioned to the Web Application Proxy authentication cookie.
This cmdlet setting is not applicable for the applications that are published with the OAuth authentication protocol.

↑ Back to the top

References

See the terminology that Microsoft uses to describe software updates.

↑ Back to the top

Applies to:

↑ Back to the top

Keywords: kb, kbautohotfix, kbqfe, kbhotfixserver, kbfix, kbsurveynew, kbexpertiseinter

↑ Back to the top

Article Info

Article ID	:	3042121
Revision	:	1
Created on	:	1/7/2017
Published on	:	4/15/2015
Exists online	:	False
Views	:	422

Microsoft KB Archive Search

Hotfix enables AD FS token replay protection for Web Application Proxy authentication tokens in Windows Server 2012 R2

About this hotfix

Hotfix information

Prerequisites

Registry information

Restart requirement

Hotfix replacement information

Windows Server 2012 R2 file information and notes

For all supported x64-based versions of Windows Server 2012 R2

Additional file information

Additional file information for Windows Server 2012 R2

Additional files for all supported x64-based versions of Windows Server 2012 R2

Status

More Information

References

Applies to: