CBA Protected Servers

I'm configuring Certificate Based Authentication between the DPM Server and a few ProductionServers and I noticed that if you miss out on a really important step, at least myself got stuck with my head banging against a wall. 

When running the command Attach-ProductionServerWithCertificate.ps1 -DPMServername DPMServer -PSCredential <pathToBinFile> I got this error message

WARNING: Connecting to DPM server: DPMServer
There is failure while attaching production server with certificates
C:\Program Files\Microsoft System Center 2012\DPM\DPM\bin\Attach-ProductionServerWithCertificate.ps1 : DPM CPWrapper Service on the ProductionServer computer has encountered a failure and may
 be in an unusable state. Exception Message = The socket connection was aborted. This could be caused by an error processing your message or a receive timeout being exceeded by th
e remote host, or an underlying network resource issue. Local socket timeout was '00:00:59.9680000'..
At line:1 char:1
+ .\Attach-ProductionServerWithCertificate.ps1 -DPMServerName DPMServer -PSCredential  ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Attach-ProductionServerWithCertificate.ps1
- Check that the relevant firewall exceptions are configured correctly.
- Check if the certificate used by the DPM CPWrapper service on the ProductionServer computer is trusted by the peer server.
- Try to restart the DPM CPWrapper service on the ProductionServer computer.

And it turns out that the problem behind all this is the lack of the root certificate. Just install the root certificate in the Trusted Root Certification Authorities (and any intermediate certificates in the Intermediate Certification Authorites) you should be good to go!

/Joseph

Update on Re: Hardware - Hardware - Hardware

I sat down with Santa and had a discussion about what to do with the hardware and if we should invest in a new Raid Card, and after a quick glance on the blogpost to see the performance numbers we looked at each other and nodded intensely. So after asking Santas Wife for OK to order we did, and it is here!

It's been installed in the server and I was exited when I started up the server for the first time with the new card installed. But after running the CrystalMark program I felt my heart drop, take a look at these numbers!






These are the numbers, and just look at them! 49MB/s compared to 31MB/s with the PERC H310 card. So after thinking for a few minutes I realized that I might have to configure something. Said and done I installed the Server Administrator software from Dell in order to reconfigure the write settings.

After changing the setting I did another test with CrystalMark and here are the results!



That is some improvement! Time to work some more!