Manage the configuration server for VMware VMs
You set up an on-premises configuration server when you use Azure Site Recovery for disaster recovery of VMware VMs and physical servers to Azure. The configuration server coordinates communications between on-premises VMware and Azure and manages data replication. This article summarizes common tasks for managing the configuration server after it's deployed.
Modify VMware settings
You can access the configuration server as follows:
- Sign in to the VM on which it's deployed, and Start Azure Site Recovery Configuration Manager from the desktop shortcut.
- Alternatively, you can access the configuration server remotely from https://ConfigurationServerName/:44315/. Sign in with administrator credentials.
Modify VMware server settings
- To associate a different VMware server with the configuration server, after sign-in, select Add vCenter Server/vSphere ESXi server.
- Enter the details, and then select OK.
Modify credentials for automatic discovery
- To update the credentials used to connect to the VMware server for automatic discovery of VMware VMs, after sign-in, select Edit.
Enter the new credentials, and then select OK.
Modify credentials for Mobility Service installation
Modify the credentials used to automatically install Mobility Service on the VMware VMs you enable for replication.
- After sign-in, select Manage virtual machine credentials
Enter the new credentials, and then select OK.
Modify proxy settings
Modify the proxy settings used by the configuration server machine for internet access to Azure. If you have a process server machine in addition to the default process server running on the configuration server machine, modify the settings on both machines.
- After sign-in to the configuration server, select Manage connectivity.
- Update the proxy values. Then select Save to update the settings.
Add a network adapter
The Open Virtualization Format (OVF) template deploys the configuration server VM with a single network adapter.
- You can add an additional adapter to the VM, but you must add it before you register the configuration server in the vault.
- To add an adapter after you register the configuration server in the vault, add the adapter in the VM properties. Then you need to reregister the server in the vault.
Reregister a configuration server in the same vault
You can reregister the configuration server in the same vault if you need to. If you have an additional process server machine, in addition to the default process server running on the configuration server machine, reregister both machines.
- In the vault, open Manage > Site Recovery Infrastructure > Configuration Servers.
- In Servers, select Download registration key to download the vault credentials file.
- Sign in to the configuration server machine.
- In %ProgramData%\ASR\home\svsystems\bin, open cspsconfigtool.exe.
- On the Vault Registration tab, select Browse, and locate the vault credentials file that you downloaded.
- If needed, provide proxy server details. Then select Register.
Open an admin PowerShell command window, and run the following command:
$pwd = ConvertTo-SecureString -String MyProxyUserPassword Set-OBMachineSetting -ProxyServer http://myproxyserver.domain.com -ProxyPort PortNumber – ProxyUserName domain\username -ProxyPassword $pwd net stop obengine net start obengine
Upgrade the configuration server
You run update rollups to update the configuration server. Updates can be applied for up to N-4 versions. For example:
- If you run 9.7, 9.8, 9.9, or 9.10, you can upgrade directly to 9.11.
- If you run 9.6 or earlier and you want to upgrade to 9.11, you must first upgrade to version 9.7. before 9.11.
Links to update rollups for upgrading to all versions of the configuration server are available in the wiki updates page.
Upgrade the server as follows:
- In the vault, go to Manage > Site Recovery Infrastructure > Configuration Servers.
- If an update is available, a link appears in the Agent Version > column.
Download the update installer file to the configuration server.
Double-click to run the installer.
- The installer detects the current version running on the machine. Click Yes to start the upgrade.
When the upgrade completes the server configuration validates.
Click Finish to close the installer.
Delete or unregister a configuration server
- Disable protection for all VMs under the configuration server.
- Disassociate and delete all replication policies from the configuration server.
- Delete all vCenter servers/vSphere hosts that are associated with the configuration server.
- In the vault, open Site Recovery Infrastructure > Configuration Servers.
Select the configuration server that you want to remove. Then, on the Details page, select Delete.
Delete with PowerShell
You can optionally delete the configuration server by using PowerShell.
- Install the Azure PowerShell module.
Sign in to your Azure account by using this command:
Select the vault subscription.
Get-AzureRmSubscription –SubscriptionName <your subscription name> | Select-AzureRmSubscription
Set the vault context.
$vault = Get-AzureRmRecoveryServicesVault -Name <name of your vault> Set-AzureRmSiteRecoveryVaultSettings -ARSVault $vault
Retrieve the configuration server.
$fabric = Get-AzureRmSiteRecoveryFabric -FriendlyName <name of your configuration server>
Delete the configuration server.
Remove-AzureRmSiteRecoveryFabric -Fabric $fabric [-Force]
You can use the -Force option in Remove-AzureRmSiteRecoveryFabric for forced deletion of the configuration server.
Generate configuration server Passphrase
- Sign in to your configuration server, and then open a command prompt window as an administrator.
- To change the directory to the bin folder, execute the command cd %ProgramData%\ASR\home\svsystems\bin
- To generate the passphrase file, execute genpassphrase.exe -v > MobSvc.passphrase.
- Your passphrase will be stored in the file located at %ProgramData%\ASR\home\svsystems\bin\MobSvc.passphrase.
Renew SSL certificates
The configuration server has an inbuilt web server, which orchestrates activities of the Mobility Service, process servers, and master target servers connected to it. The web server uses an SSL certificate to authenticate clients. The certificate expires after three years and can be renewed at any time.
For configuration server deployments before May 2016, certificate expiry was set to one year. If you have a certificate that is going to expire, the following occurs:
- When the expiry date is two months or less, the service starts sending notifications in the portal, and by email (if you subscribed to Site Recovery notifications).
- A notification banner appears on the vault resource page. For more information, select the banner.
- If you see an Upgrade Now button, it indicates that some components in your environment haven't been upgraded to 9.4.xxxx.x or higher versions. Upgrade the components before you renew the certificate. You can't renew on older versions.
Renew the certificate
- In the vault, open Site Recovery Infrastructure > Configuration Server. Select the required configuration server.
- The expiry date appears under Configuration Server health.
- Select Renew Certificates.
Review the tutorials for setting up disaster recovery of VMware VMs to Azure.