In Windows, Start > Run > mmc.
Attach snapshot certificates as service.
Select AD FS.
Import the CA certificate to trusted authorities.