Your companys Management Group includes a Root Management Server (RMS) and a Management Server. You export the Root Management Server key during the RMS installation process. The hard disk fails on the Root Management Server. You need to transfer the RMS role to the Management Server. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A.
Use the ResetSRS.exe utility on the Management Server.
B.
Use the MOM.msi utility to install a new Root Management Server.
C.
Use the SecureStorageBackup.exe utility on the Management Server.
D.
Use the ManagementServerConfigTool.exe utility on the Management Server.
Explanation:
The root management server encryption key holds all the Run As Account information defined in the management group. To successfully restore a failed root management server, you must use that key to reattach the databases and to access the Run As Accounts that have been encrypted with this key. If you need to restore the root management server without this backup, you need to re-enter your entire Run As Accounts.
To back up or to restore the root management server key, you need to use the SecureStorageBackup tool. The tool can start the Encryption Key Backup or Restore Wizard, or run as a command-line tool. The availability and the behavior of the tool depend on whether or not the console is installed on the management server.
The SecureStorageBackup tool functions as follows:
If the console and a management server are both installed, the tool is installed in the System Center Operations Manager 2007 installation folder.In this case, by default, the Encryption Key Backup or Restore Wizard runs at the final stage of setup, allowing you to back up the key. Also, if you start the tool without arguments, it starts the Encryption Key Backup or Restore Wizard, and if you start the tool with arguments, it runs as a command-line tool.
If the console is not installed, the SecureStorageBackup tool is not installed. For example, this happens if you are installing Operations Manager RMS on a cluster without installing the console on any server. In this case, to use the tool, you must first copy it from the SupportTools folder on the installation media to the installation folder on the management server.
In this case, the tool runs as a command-line tool, and you must provide proper arguments. You can run SecureStorageBackup.exe with the ‘/?’ switch to get help for the tool.
When backing up the encryption key, always ensure that you provide a backup location that is easily accessible in case you later need to retrieve the key. For more information about backing up the root management server encryption key, see the Microsoft System Center Operations Manager 2007 Deployment Guide.