AD FS 2.0 Basics
Configuring the Token-Decrypting Certificate
Adding CA Certificates to AD FS 2.0