This message was deleted.

No Windows role or function is automatically installed...

When we install FAS and click on deploy, it contacts AD server and deploys some certs/roles/functions right?

It contacts your CA and deploys 3 certificate templates per https://docs.citrix.com/en-us/federated-authentication-service/current-release/install-configure