SharePoint 2013: How to Configure Secure Store Service Application using PowerShell

Last Updated March 28, 2014

Description

This post describes how to configure the SharePoint Server 2013 Secure Store Service Application using PowerShell.

Solution

1)  Document the Naming Convention
Determine a naming convention for each of the Secure Store Service Application components.  Document the naming convention.

Example:
Application Pool Service Account:  Domain\SvcAccount (this should already be created)
Application Pool: SvcApp_SPServiceApplicationPool_02 (this should already be created)
Service Application: SvcApp_SPSecureStoreServiceApplication_01
Database: SvcApp_SPSecureStoreServiceApplication_01_DB_01

Service Application Proxy:  SvcApp_SPSecureStoreServiceApplication_01_Proxy_01

2)  Open the SharePoint 2013 Management Shell as Administrator.

3)  Start the Secure Store Service.
Get-SPServiceInstance | Where {$_.TypeName -like "Secure Store Service"}

Use the Get-SPServiceInstance cmdlet to get the ID Numbers of the SPServiceInstance(s).  Once you have the ID Numbers, use the numbers to start each SPServiceInstance.  Once fully started, the status of each will show as "Online".

Example:
Start-SPServiceInstance 67877d63-bff4-4521-867a-ef4979ba07ce

Start-SPServiceInstance IDNumber1
Start-SPServiceInstance IDNumber2

3)  Verify the Name of the Application Pool.
Get-SPServiceApplicationPool | Select Name

4)  Set the Service Application Pool in a variable.
$SvcAppPool02 = Get-SPServiceApplicationPool "SvcApp_SPServiceApplicationPool_02"

5)  Create the Secure Store Service Application.  Specify the Application Pool, the AuditingEnabled setting, the Service Application Name, the Database Name, and the Database Server Name.

$SvcApp = New-SPSecureStoreServiceApplication -ApplicationPool $SvcAppPool –AuditingEnabled:$false -Name "SvcApp_SPSecureStoreServiceApplication_01" -DatabaseName "SvcApp_SPSecureStoreServiceApplication_01_DB_01" -DatabaseServer "SQL Server Alias"
 
6)  Verify the Service Application.
Get-SPServiceApplication | Select Name

7)  Create the Service Application Proxy and assign it to the Service Application.
$SvcAppProxy = New-SPSecureStoreServiceApplicationProxy -Name "SvcApp_SPSecureStoreServiceApplication_01_Proxy_01" -ServiceApplication $SvcApp

8)  Verify Service Application Proxy.
Get-SPServiceApplicationProxy | Select Name

References

Farid, S. (2011).  Configure Secure Store Service using PowerShell.  Retrieved January 22, 2014 from http://samirfarid.wordpress.com/2011/11/28/configure-secure-store-service-using-powershell.

Microsoft TechNet (2014).  Configure the Secure Store Service in SharePoint 2013.   Retrieved January 22, 2014 from http://technet.microsoft.com/en-us/library/ee806866.aspx.

Microsoft TechNet (2014).  New-SPSecureStoreServiceApplication.  Retrieved January 22, 2014 from http://technet.microsoft.com/en-us/library/ff608083.aspx.

Microsoft TechNet (2014).  New-SPSecureStoreServiceApplicationProxy.  Retrieved January 22, 2014 from http://technet.microsoft.com/en-us/library/ff607856.aspx.

Microsoft TechNet (2014).  Secure Store Service cmdlets in SharePoint 2013.  Retrieved January 22, 2014 from http://technet.microsoft.com/en-us/library/ee906549.aspx.

Microsoft TechNet (2014).  Service application cmdlets in SharePoint 2013.  Retrieved January 22, 2014 from http://technet.microsoft.com/en-us/library/ee906561.aspx.

Microsoft TechNet (2014).  SharePoint 2013 - Service Applications.  Retrieved January 22, 2014 from http://social.technet.microsoft.com/wiki/contents/articles/12512.sharepoint-2013-service-applications.aspx.