O'Reilly logo

System Center 2016 Virtual Machine Manager Cookbook - Third Edition by Edvaldo Alessandro Cardoso, Roman Levchenko

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

How to do it...

As already mentioned, HGS cannot be configured from the VMM console and requires steps that needed to be done on an HGS server (HGS-01 in my demo).

  1. The first step is to request signing and encryption certificates that play a part in the decryption of shielded VM keys. To do this, I'm using my Certificate Authority (CA) through which the certificate is added to the HGS machine as a Trusted Root CA template named HGS and the following code:
Ensure that the machine from which you make requests has the read and enroll permissions on  the certificate template (HGS, in my case). Otherwise, requests will fail with the following error: The permissions on the certificate template do not allow the current user to enroll for this type ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required