HYPER-V and SYSTEM CENTER

Guy, anyone doing site to site DPM replication. Well, i have been playing around it since DPM 2010. Now i am testing Site to Site Replication using DPM 2012 and this round i’m not talking about step by step configuration. We will focus on the common question especially on firewall that exist in Site A and Site B. You are require to open certain ports in order for the replication to work.

Now, Microsoft Technet provide a good article on ports that you need to open in order for communication between DPM Server, Domain Controller, DPM Remote SQL Server and protected server. You can check the firewall port from here:- technet.microsoft.com/en-us/library/ff399341.aspx

One of the concern is the WMI and RPC dynamic port number which the range from TCP 1024 through 65535. So most security team will not allow you to open huge range of port number between site A and site B. Therefore below is the step by step that you can follow to configure fixed WMI port and set range of dynamic RPC port.

1. Configure WMI to use Fixed Port – TCP/24158

a) Open command prompt and type the following command

To verify, open the Component Services from Administrative Tools. Expand My Computer | DCOM Config | Right click Windows Management Instrumentation and select EndPoint Tab. Select Connection oriented TCP/IP and select Properties

2. Configure Dynamic RPC Port to a specific range. For example: 60000 – 60500.

a) Open registry using the command regedt32. (must. Don’t use regedit)

b) Create the following Key Value under

c) Create Key Data Type

Example:-

Ports: REG_MULTI_SZ: 60000-60500

PortsInternetAvailable: REG_SZ: Y

UseInternetPorts: REG_SZ: Y

d) Reboot the both the DPM server

3. Configure physical firewall between Site A and Site B.

Example:-

That’s all for now. Hope this article is useful for those who are planning to setup site to site replication using DPM 2012.

Today we are going to look into how to secure the data store into tape. To encrypt the data store in tape, you need to have a valid certificate. When configure tape select “Encrypt Data”

Below screenshot is the error message when you’re trying to backup data to tape. The job will fail because it did not detect certificate under DPMBackupStore Store under Certificate snap-in.

To resolve this issue, use any computer with IIS snap-in. Create a self signed certificate.

Below is the screenshot, on how to create a self signed certificate.

Provide a certificate name. Example: DPMCert