How to Replace an Operations Manager 2007 R2 Gateway that Has an Unsupported Configuration (Operations Manager Upgrade)
Updated: May 13, 2016
Applies To: System Center 2012 R2 Operations Manager, System Center 2012 - Operations Manager, System Center 2012 SP1 - Operations Manager
If you have an System Center Operations Manager 2007 R2 gateway server that does not meet the minimum supported configuration requirements for System Center 2012 – Operations Manager, you must replace the gateway server before you upgrade to System Center 2012 – Operations Manager. For more information, see Supported Configurations for System Center 2012 - Operations Manager. This procedure shows you how to add a new Operations Manager 2007 R2 gateway and to prepare it for upgrade.
Replacing an Operations Manager 2007 R2 Gateway Server
The steps you take to replace the gateway server include the following:
Register the computer that will host the gateway with the management group. See Registering the Gateway with the Management Group.
Install the Operations Manager 2007 R2 gateway server. See Installing a Gateway Server.
Deploy and import certificates on the gateway and management servers. See Deploying the Certificates.
Remove the old gateway server. See How to Remove an Operations Manager 2007 R2 Gateway (Operations Manager Upgrade).
Registering the Gateway with the Management Group
Before you install a new Operations Manager 2007 R2 gateway server, you must register the computer that will host the gateway with the management group. This procedure registers the gateway server with the management group, and when registration is completed, the gateway server appears in the Discovered Inventory view of the management group.
You must first copy the gateway approval tool (Microsoft.EnterpriseManagement.GatewayApprovalTool.exe) to the management server. This tool is required only on the management server, and it only has to be run one time.
To copy Microsoft.EnterpriseManagement.GatewayApprovalTool.exe to management servers
From a targeted management server, open the Operations Manager 2007 R2 installation media \SupportTools directory.
Copy the Microsoft.EnterpriseManagement.GatewayApprovalTool.exe from the installation media to the targeted management server. You should copy it to the installation directory of the management server.
To run the gateway approval tool
Log on to the management server that the gateway server will target by using the Operations Manager Administrators credentials.
Open a Command Prompt window, and browse to the directory where you copied Microsoft.EnterpriseManagement.gatewayApprovalTool.exe.
At the command prompt, run Microsoft.EnterpriseManagement.gatewayApprovalTool.exe /ManagementServerName=<managementserverFQDN> /GatewayName=<GatewayFQDN> /Action=Create
If the approval is successful, the following message appears The approval of server <GatewayFQDN> completed successfully.
Open the Operations console to the Monitoring view. Select the Discovered Inventory view to verify that the gateway server is present.
Installing a Gateway Server
You must install an Operations Manager 2007 R2 gateway on a server that meets the minimum supported configuration requirements for System Center 2012 – Operations Manager.
To install an Operations Manager 2007 R2 gateway server
Log on to the gateway server with local administrator rights.
From the Operations Manager 2007 R2 installation media, run SetupOM.exe.
In the Install area, click the Install Operations Manager 2007 R2 Gateway link.
On the Welcome page, click Next.
On the Destination Folder page, accept the default, or click Change to select a different installation directory, and then click Next.
On the Management Group Configuration page, type the targeted management group name in the Management Group Name box, type the targeted management server name in the Management Server box, check that the Management Server Port box is 5723, and then click Next. This port can be changed if you have enabled a different port for management server communication in the Operations console.
On the Gateway Action Account page, select the Local System account option, unless you have specifically created a domain-based or local computer-based gateway action account. Click Next.
On the Microsoft Update page, optionally indicate if you want to use Microsoft Update, and then click Next.
On the Ready to Install page, click Install.
On the Completing Installation page, click Finish.
Deploying the Certificates
Because the gateway server is not trusted by the domain that the management group is in, certificates must be used to establish the identity of each gateway server and management server. This arrangement satisfies the requirement of Operations Manager for mutual authentication. You must request and download the certificates, and then import them by using the Operations Manager 2007 R2 MOMCertImport.exe tool.
Reliable name resolution must exist between the agent-managed computers and the gateway server and between the gateway server and the management servers. Typically, Domain Name System (DNS) is used to resolve host names, such as www.contoso.com, to their corresponding IP addresses. However, if it is not possible to get proper name resolution through DNS, you might have to manually create entries in the Hosts file of each computer to resolve host names to IP addresses.
The Hosts file is located in a subdirectory of the C:\Windows\System32\Drivers, and it contains directions for configuration.
After you have downloaded the certificates to each gateway server and management server, you import them by using the MOMCertImport tool.
To request and download certificates
Request and download a Trusted Root (CA) certificate on each gateway and management server.
To import computer certificates by using MOMCertImport.exe
Copy the MOMCertImport.exe tool from the installation media \SupportTools directory to the root of the gateway server or to the Operations Manager 2007 R2 installation directory of the management server.
Open a Command Prompt window by using the Run as Administrator option, change to the directory to the location of MOMCertImport.exe, and then run momcertimport.exe /SubjectName <certificate subject name>. This makes the certificate usable by Operations Manager.
If you double-click MOMCertImport.exe or run it at the Command Prompt window without any parameters, a dialog box appears where you can select the installed certificate, and then click OK.
The next step is to remove the old gateway server from the management group. For more information, see How to Remove an Operations Manager 2007 R2 Gateway (Operations Manager Upgrade).