The third-party certificate (with the private key) is installed in the Computer Store before starting the AD FS configuration ...