您现在访问的是微软AZURE全球版技术文档网站,若需要访问由世纪互联运营的MICROSOFT AZURE中国区技术文档网站,请访问 https://docs.azure.cn.

为物理服务器灾难恢复管理配置服务器Manage the configuration server for physical server disaster recovery

使用 Azure Site Recovery 服务进行物理服务器到 Azure 的灾难恢复时,需要设置本地配置服务器。You set up an on-premises configuration server when you use the Azure Site Recovery service for disaster recovery of physical servers to Azure. 配置服务器协调本地计算机与 Azure 之间的通信并管理数据复制。The configuration server coordinates communications between on-premises machines and Azure, and manages data replication. 本文概述部署配置服务器后对其进行管理时要执行的常见任务。This article summarizes common tasks for managing the configuration server after it's been deployed.

备注

本文进行了更新,以便使用新的 Azure PowerShell Az 模块。This article has been updated to use the new Azure PowerShell Az module. 你仍然可以使用 AzureRM 模块,至少在 2020 年 12 月之前,它将继续接收 bug 修补程序。You can still use the AzureRM module, which will continue to receive bug fixes until at least December 2020. 若要详细了解新的 Az 模块和 AzureRM 兼容性,请参阅新 Azure Powershell Az 模块简介To learn more about the new Az module and AzureRM compatibility, see Introducing the new Azure PowerShell Az module. 有关 Az 模块安装说明,请参阅安装 Azure PowerShellFor Az module installation instructions, see Install Azure PowerShell.

先决条件Prerequisites

此表汇总了用于部署本地配置服务器计算机的先决条件。The table summarizes the prerequisites for deploying the on-premises configuration server machine.

组件Component 要求Requirement
CPU 核心数CPU cores 88
RAMRAM 16 GB16 GB
磁盘数目Number of disks 3,包括操作系统磁盘、进程服务器缓存磁盘和用于故障回复保留驱动器3, including the OS disk, process server cache disk, and retention drive for failback
磁盘可用空间(进程服务器缓存)Disk free space (process server cache) 600 GB600 GB
磁盘可用空间(保留磁盘)Disk free space (retention disk) 600 GB600 GB
操作系统Operating system Windows Server 2012 R2Windows Server 2012 R2
Windows Server 2016Windows Server 2016
操作系统区域设置Operating system locale 英语(美国)English (US)
VMware vSphere PowerCLI 版本VMware vSphere PowerCLI version 不是必需Not required
Windows Server 角色Windows Server roles 请勿启用以下角色:Don't enable these roles:
- Active Directory 域服务- Active Directory Domain Services
- Internet Information Services- Internet Information Services
- Hyper-V- Hyper-V
组策略Group policies 请勿启用以下组策略:Don't enable these group policies:
- 阻止访问命令提示符- Prevent access to the command prompt
- 阻止访问注册表编辑工具- Prevent access to registry editing tools
- 信任文件附件的逻辑- Trust logic for file attachments
- 打开脚本执行- Turn on Script Execution
了解详细信息Learn more
IISIIS - 无预先存在的默认网站- No pre-existing default website
- 启用匿名身份验证- Enable Anonymous Authentication
- 启用 FastCGI 设置- Enable FastCGI setting
- 端口 443 上没有预先存在的网站/应用程序侦听- No pre-existing website/application listening on port 443
NIC 类型NIC type VMXNET3(部署为 VMware VM 时)VMXNET3 (when deployed as a VMware VM)
IP 地址类型IP address type 静态Static
Internet 访问权限Internet access 服务器需要以下 URL 的访问权限:The server needs access to these URLs:
- *.accesscontrol.windows.net- *.accesscontrol.windows.net
- *.backup.windowsazure.com- *.backup.windowsazure.com
- *.store.core.windows.net- *.store.core.windows.net
- *.blob.core.windows.net- *.blob.core.windows.net
- *.hypervrecoverymanager.windowsazure.com- *.hypervrecoverymanager.windowsazure.com
- https://management.azure.com
- *.services.visualstudio.com- *.services.visualstudio.com
- https://dev.mysql.com/get/Downloads/MySQLInstaller/mysql-installer-community-5.7.20.0.msi(横向扩展进程服务器不需要)- https://dev.mysql.com/get/Downloads/MySQLInstaller/mysql-installer-community-5.7.20.0.msi (not required for Scale-out Process Servers)
- time.nist.gov- time.nist.gov
- time.windows.com- time.windows.com
端口Ports 443(控制通道协调)443 (Control channel orchestration)
9443(数据传输)9443 (Data transport)

下载最新的安装文件Download the latest installation file

Site Recovery 门户中提供了配置服务器安装文件的最新版本。The latest version of the configuration server installation file is available in the Site Recovery portal. 另外,还可以直接从 Microsoft 下载中心下载该代理。Additionally, it can be downloaded directly from the Microsoft Download Center.

  1. 登录 Azure 门户并浏览到恢复服务保管库。Log on to the Azure portal and browse to your Recovery Services Vault.

  2. 浏览到“Site Recovery 基础结构” > “配置服务器”(在“针对 VMware 和物理计算机”下面)。Browse to Site Recovery Infrastructure > Configuration Servers (under For VMware & Physical Machines).

  3. 单击“+服务器”按钮。Click the +Servers button.

  4. 在“添加服务器”页中,单击“下载”按钮下载注册密钥。On the Add Server page, click the Download button to download the Registration key. 在安装配置服务器的过程中,需要使用此密钥将它注册到 Azure Site Recovery 服务。You need this key during the Configuration Server installation to register it with Azure Site Recovery service.

  5. 单击“下载 Microsoft Azure Site Recovery 统一安装程序”链接,下载最新版本的配置服务器。Click the Download the Microsoft Azure Site Recovery Unified Setup link to download the latest version of the Configuration Server.

    下载页

安装并注册服务器Install and register the server

  1. 运行统一安装程序安装文件。Run the Unified Setup installation file.

  2. 在“开始之前”中,选择“安装配置服务器和进程服务器”。In Before You Begin, select Install the configuration server and process server.

    开始之前

  3. 在“第三方软件许可证”中单击“我接受”,下载并安装 MySQL。In Third Party Software License, click I Accept to download and install MySQL.

  4. 在“Internet 设置”中,指定配置服务器上运行的提供程序如何通过 Internet 连接到 Azure Site Recovery。In Internet Settings, specify how the Provider running on the configuration server connects to Azure Site Recovery over the Internet. 确保已允许所需的 URL。Make sure you've allowed the required URLs.

    • 如果想要使用当前已在计算机上设置的代理进行连接,请选择“使用代理服务器连接到 Azure Site Recovery”。If you want to connect with the proxy that's currently set up on the machine, select Connect to Azure Site Recovery using a proxy server.
    • 如果希望提供程序直接进行连接,请选择“在不使用代理服务器的情况下直接连接到 Azure Site Recovery”。If you want the Provider to connect directly, select Connect directly to Azure Site Recovery without a proxy server.
    • 如果现有代理要求身份验证,或者你想要使用自定义代理进行提供程序连接,请选择“使用自定义代理设置进行连接”,并指定地址、端口和凭据。If the existing proxy requires authentication, or if you want to use a custom proxy for the Provider connection, select Connect with custom proxy settings, and specify the address, port, and credentials. 防火墙Firewall
  5. 在“先决条件检查”设置中运行检查,确保安装可以运行。In Prerequisites Check, Setup runs a check to make sure that installation can run. 如果看到有关全局时间同步检查的警告,请检查系统时钟的时间(“日期和时间”设置)是否与时区相同。If a warning appears about the Global time sync check, verify that the time on the system clock (Date and Time settings) is the same as the time zone.

    先决条件

  6. 在“MySQL 配置”中,创建用于登录到要安装的 MySQL 服务器实例的凭据。In MySQL Configuration, create credentials for logging on to the MySQL server instance that is installed.

    MySQL

  7. 在“环境详细信息”中,选择是否要复制 VMware VM。In Environment Details, select whether you're going to replicate VMware VMs. 如果要复制,则安装程序会检查 PowerCLI 6.0 是否已安装。If you are, then Setup checks that PowerCLI 6.0 is installed.

  8. 在“安装位置”中,选择要安装二进制文件和存储缓存的位置。In Install Location, select where you want to install the binaries and store the cache. 所选驱动器必须至少有 5 GB 的可用磁盘空间,但我们建议选择至少有 600 GB 可用空间的缓存驱动器。The drive you select must have at least 5 GB of disk space available, but we recommend a cache drive with at least 600 GB of free space.

    安装位置

  9. 在“网络选择”中,首先选择内置进程服务器用于发现的 NIC,将移动服务的安装推送到源计算机上,然后选择配置服务器用来与 Azure 连接的 NIC。In Network Selection, first select the NIC that the in-built process server uses for discovery and push installation of mobility service on source machines, and then select the NIC that Configuration Server uses for connectivity with Azure. 端口 9443 是用于发送和接收复制流量的默认端口,但可以根据环境的要求修改此端口号。Port 9443 is the default port used for sending and receiving replication traffic, but you can modify this port number to suit your environment's requirements. 除了端口 9443 以外,还要打开端口 443,Web 服务器将使用该端口协调复制操作。In addition to the port 9443, we also open port 443, which is used by a web server to orchestrate replication operations. 请不要使用端口 443 来发送或接收复制流量。Do not use port 443 for sending or receiving replication traffic.

    网络选择

  10. 在“摘要”中复查信息,并单击“安装”。In Summary, review the information and click Install. 安装完成后,将生成通行短语。When installation finishes, a passphrase is generated. 启用复制时需要用到它,因此请复制并将它保存在安全的位置。You will need this when you enable replication, so copy it and keep it in a secure location.

注册完成后,服务器会显示在保管库的“设置” > “服务器”边栏选项卡中。After registration finishes, the server is displayed on the Settings > Servers blade in the vault.

从命令行安装Install from the command line

如下所示运行安装文件:Run the installation file as follows:

UnifiedSetup.exe [/ServerMode <CS/PS>] [/InstallDrive <DriveLetter>] [/MySQLCredsFilePath <MySQL credentials file path>] [/VaultCredsFilePath <Vault credentials file path>] [/EnvType <VMWare/NonVMWare>] [/PSIP <IP address to be used for data transfer] [/CSIP <IP address of CS to be registered with>] [/PassphraseFilePath <Passphrase file path>]

示例用法Sample usage

MicrosoftAzureSiteRecoveryUnifiedSetup.exe /q /x:C:\Temp\Extracted
cd C:\Temp\Extracted
UNIFIEDSETUP.EXE /AcceptThirdpartyEULA /servermode "CS" /InstallLocation "D:\" /MySQLCredsFilePath "C:\Temp\MySQLCredentialsfile.txt" /VaultCredsFilePath "C:\Temp\MyVault.vaultcredentials" /EnvType "VMWare"

ParametersParameters

参数名称Parameter Name 类型Type 说明Description Values
/ServerMode/ServerMode 必选Required 指定是要同时安装配置服务器和进程服务器,还是只安装进程服务器Specifies whether both the configuration and process servers should be installed, or the process server only CSCS
PSPS
/InstallLocation/InstallLocation 必选Required 用于安装组件的文件夹The folder in which the components are installed 计算机上的任意文件夹Any folder on the computer
/MySQLCredsFilePath/MySQLCredsFilePath 必选Required MySQL 服务器凭据存储到的文件路径The file path in which the MySQL server credentials are stored 文件应采用以下指定格式The file should be the format specified below
/VaultCredsFilePath/VaultCredsFilePath 必选Required 保管库凭据文件的路径The path of the vault credentials file 有效的文件路径Valid file path
/EnvType/EnvType 必选Required 要保护的环境类型Type of environment that you want to protect VMwareVMware
NonVMwareNonVMware
/PSIP/PSIP 必选Required 要用于复制数据传输的 NIC 的 IP 地址IP address of the NIC to be used for replication data transfer 任何有效的 IP 地址Any valid IP Address
/CSIP/CSIP 必选Required 配置服务器侦听时所在的 NIC 的 IP 地址The IP address of the NIC on which the configuration server is listening on 任何有效的 IP 地址Any valid IP Address
/PassphraseFilePath/PassphraseFilePath 必选Required 通行短语文件位置的完整路径The full path to location of the passphrase file 有效的文件路径Valid file path
/BypassProxy/BypassProxy 可选Optional 指定配置服务器不使用代理连接到 AzureSpecifies that the configuration server connects to Azure without a proxy 若要从 Venu 获取此值To do get this value from Venu
/ProxySettingsFilePath/ProxySettingsFilePath 可选Optional 代理设置(默认代理需要身份验证,或自定义代理)Proxy settings (The default proxy requires authentication, or a custom proxy) 文件应采用以下指定格式The file should be in the format specified below
DataTransferSecurePortDataTransferSecurePort 可选Optional PSIP 上用于复制数据的端口号Port number on the PSIP to be used for replication data 有效端口号(默认值为 9433)Valid Port Number (default value is 9433)
/SkipSpaceCheck/SkipSpaceCheck 可选Optional 跳过缓存磁盘的空间检查Skip space check for cache disk
/AcceptThirdpartyEULA/AcceptThirdpartyEULA 必选Required 该标志表示接受第三方 EULAFlag implies acceptance of third-party EULA
/ShowThirdpartyEULA/ShowThirdpartyEULA 可选Optional 显示第三方 EULA。Displays third-party EULA. 如果作为输入提供,将忽略所有其他参数If provided as input all other parameters are ignored

创建 MYSQLCredsFilePath 的文件输入Create file input for MYSQLCredsFilePath

MySQLCredsFilePath 参数使用某个文件作为输入。The MySQLCredsFilePath parameter takes a file as input. 创建使用以下格式的文件并将其作为输入 MySQLCredsFilePath 参数进行传递。Create the file using the following format and pass it as input MySQLCredsFilePath parameter.

[MySQLCredentials]
MySQLRootPassword = "Password"
MySQLUserPassword = "Password"

创建 ProxySettingsFilePath 的文件输入Create file input for ProxySettingsFilePath

ProxySettingsFilePath 参数使用某个文件作为输入。ProxySettingsFilePath parameter takes a file as input. 创建使用以下格式的文件并将其作为输入 ProxySettingsFilePath 参数进行传递。Create the file using the following format and pass it as input ProxySettingsFilePath parameter.

[ProxySettings]
ProxyAuthentication = "Yes/No"
Proxy IP = "IP Address"
ProxyPort = "Port"
ProxyUserName="UserName"
ProxyPassword="Password"

修改代理设置Modify proxy settings

可以如下所述修改配置服务器计算机的代理设置:You can modify proxy settings for the configuration server machine as follows:

  1. 登录到配置服务器。Log on to the configuration server.

  2. 使用桌面上的快捷方式启动 cspsconfigtool.exe。Launch the cspsconfigtool.exe using the shortcut on your desktop.

  3. 单击“保管库注册”选项卡。Click the Vault Registration tab.

  4. 从门户下载新的保管库注册文件,并将其作为输入提供给该工具。Download a new vault registration file from the portal, and provide it as input to the tool.

    register-configuration-server

  5. 提供新代理服务器的详细信息,并单击“注册”按钮。Provide the new proxy details and click the Register button.

  6. 打开管理员 PowerShell 命令窗口。Open an Admin PowerShell command window.

  7. 运行以下命令:Run the following command:

    $Pwd = ConvertTo-SecureString -String MyProxyUserPassword
    Set-OBMachineSetting -ProxyServer http://myproxyserver.domain.com -ProxyPort PortNumber –ProxyUserName domain\username -ProxyPassword $Pwd
    net stop obengine
    net start obengine
    

    警告

    如果向配置服务器附加了更多的进程服务器,则需要在部署中修复所有横向扩展进程服务器上的代理设置If you have additional process servers attached to the configuration server, you need to fix the proxy settings on all the scale-out process servers in your deployment.

将配置服务器重新注册到同一保管库Reregister a configuration server with the same vault

  1. 登录到配置服务器。Log in to your Configuration Server.

  2. 使用桌面上的快捷方式启动 cspsconfigtool.exe。Launch the cspsconfigtool.exe using the shortcut on your desktop.

  3. 单击“保管库注册”选项卡。Click the Vault Registration tab.

  4. 从门户下载新的注册文件,并将其作为输入提供给该工具。Download a new registration file from the portal and provide it as input to the tool. register-configuration-serverregister-configuration-server

  5. 提供代理服务器的详细信息,并单击“注册”按钮。Provide the Proxy Server details and click the Register button.

  6. 打开管理员 PowerShell 命令窗口。Open an Admin PowerShell command window.

  7. 运行以下命令Run the following command

    $Pwd = ConvertTo-SecureString -String MyProxyUserPassword
    Set-OBMachineSetting -ProxyServer http://myproxyserver.domain.com -ProxyPort PortNumber –ProxyUserName domain\username -ProxyPassword $Pwd
    net stop obengine
    net start obengine
    

    警告

    如果有多个进程服务器,则需要重新注册它们If you have multiple process server, you need to reregister them.

将配置服务器注册到不同的保管库Register a configuration server with a different vault

警告

以下步骤将配置服务器从当前保管库取消关联,并停止配置服务器下所有受保护虚拟机的复制。The following step disassociates the configuration server from the current vault, and the replication of all protected virtual machines under the configuration server is stopped.

  1. 登录到配置服务器Log onto the configuration server

  2. 在管理员命令提示符中,运行以下命令:from an admin command prompt, run the command:

    reg delete HKLM\Software\Microsoft\Azure Site Recovery\Registration
    net stop dra
    
  3. 使用桌面上的快捷方式启动 cspsconfigtool.exe。Launch the cspsconfigtool.exe using the shortcut on your desktop.

  4. 单击“保管库注册”选项卡。Click the Vault Registration tab.

  5. 从门户下载新的注册文件,并将其作为输入提供给该工具。Download a new registration file from the portal and provide it as input to the tool.

  6. 提供代理服务器的详细信息,并单击“注册”按钮。Provide the Proxy Server details and click the Register button.

  7. 打开管理员 PowerShell 命令窗口。Open an Admin PowerShell command window.

  8. 运行以下命令Run the following command

    $pwd = ConvertTo-SecureString -String MyProxyUserPassword
    Set-OBMachineSetting -ProxyServer http://myproxyserver.domain.com -ProxyPort PortNumber –ProxyUserName domain\username -ProxyPassword $pwd
    net stop obengine
    net start obengine
    

升级配置服务器Upgrade a configuration server

运行更新汇总来更新配置服务器。You run update rollups to update the configuration server. 最多可以为 N-4 版本应用更新。Updates can be applied for up to N-4 versions. 例如:For example:

  • 如果运行的是 9.7、9.8、9.9 或 9.10 版,可以直接升级到 9.11 版。If you're running 9.7, 9.8, 9.9, or 9.10 - you can upgrade directly to 9.11.
  • 如果运行的是 9.6 版或更早版本并且想要升级到 9.11 版,则必须先升级到 9.7 版,If you're running 9.6 or earlier, and you want to upgrade to 9.11, you must first upgrade to version 9.7. 然后再升级到 9.11 版。before 9.11.

wiki 更新页中提供了用于升级到配置服务器的所有版本的更新汇总的链接。Links to update rollups for upgrading to all versions of the configuration server are available in the wiki updates page.

按如下所示升级服务器:Upgrade the server as follows:

  1. 将更新安装程序文件下载到配置服务器上。Download the update installer file to the configuration server.
  2. 双击以运行安装程序。Double-click to run the installer.
  3. 安装程序检测计算机上运行的当前版本。The installer detects the current version running on the machine.
  4. 单击“确定”以确认并运行升级。Click OK to confirm, and run the upgrade.

删除或取消注册配置服务器Delete or unregister a configuration server

警告

在开始解除配置服务器之前,请务必执行以下操作。Ensure the following before you start decommissioning your Configuration Server.

  1. 针对此配置服务器下的所有虚拟机禁用保护Disable protection for all virtual machines under this Configuration Server.
  2. 从配置服务器中取消关联删除所有复制策略。Disassociate and Delete all Replication policies from the Configuration Server.
  3. 删除所有与配置服务器关联的 vCenters 服务器/vSphere 主机。Delete all vCenters servers/vSphere hosts that are associated to the Configuration Server.

从 Azure 门户中删除配置服务器Delete the Configuration Server from Azure portal

  1. 在 Azure 门户中,从“保管库”菜单浏览到“Site Recovery 基础结构” “配置服务器”。 > In Azure portal, browse to Site Recovery Infrastructure > Configuration Servers from the Vault menu.
  2. 单击想要解除的配置服务器。Click the configuration server that you want to decommission.
  3. 在配置服务器的详细信息页中,单击“删除”按钮。On the Configuration Server's details page, click the Delete button.
  4. 单击“是”确认删除该服务器。Click Yes to confirm the deletion of the server.

卸载配置服务器及其依赖项Uninstall the configuration server and its dependencies

提示

如果打算再次结合 Azure Site Recovery 重新使用该配置服务器,可以直接跳到步骤 4If you plan to reuse the Configuration Server with Azure Site Recovery again, then you can skip to step 4 directly

  1. 以管理员身份登录到配置服务器。Log on to the Configuration Server as an Administrator.
  2. 打开“控制面板”>“程序”>“卸载程序”Open up Control Panel > Program > Uninstall Programs
  3. 按以下顺序卸载程序:Uninstall the programs in the following sequence:
    • Microsoft Azure 恢复服务代理Microsoft Azure Recovery Services Agent
    • Microsoft Azure Site Recovery 移动服务/主目标服务器Microsoft Azure Site Recovery Mobility Service/Master Target server
    • Microsoft Azure Site Recovery 提供程序Microsoft Azure Site Recovery Provider
    • Microsoft Azure Site Recovery 配置服务器/进程服务器Microsoft Azure Site Recovery Configuration Server/Process Server
    • Microsoft Azure Site Recovery 配置服务器依赖项Microsoft Azure Site Recovery Configuration Server Dependencies
    • MySQL Server 5.5MySQL Server 5.5
  4. 在管理员命令提示窗口中运行以下命令。Run the following command from and admin command prompt.
    reg delete HKLM\Software\Microsoft\Azure Site Recovery\Registration
    

删除或取消注册配置服务器 (PowerShell)Delete or unregister a configuration server (PowerShell)

  1. 安装 Azure PowerShell 模块Install Azure PowerShell module

  2. 使用命令登录到 Azure 帐户Login into to your Azure account using the command

    Connect-AzAccount

  3. 选择其下存在保管库的订阅Select the subscription under which the vault is present

    Get-AzSubscription –SubscriptionName <your subscription name> | Select-AzSubscription

  4. 现在设置保管库上下文Now set up your vault context

    $Vault = Get-AzRecoveryServicesVault -Name <name of your vault>
    Set-AzSiteRecoveryVaultSettings -ARSVault $Vault
    
  5. 选择配置服务器Get select your configuration server

    $Fabric = Get-AzSiteRecoveryFabric -FriendlyName <name of your configuration server>

  6. 删除配置服务器Delete the Configuration Server

    Remove-AzSiteRecoveryFabric -Fabric $Fabric [-Force]

备注

可以使用 AzSiteRecoveryFabric 中的 -force选项来强制删除/删除配置服务器。The -Force option in the Remove-AzSiteRecoveryFabric can be used to force the removal/deletion of the Configuration server.

续订 SSL 证书Renew SSL certificates

配置服务器具有一个内置的 Web 服务器,该服务器协调连接到配置服务器的移动服务、进程服务器和主目标服务器的活动。The configuration server has an inbuilt web server, which orchestrates activities of the Mobility service, process servers, and master target servers connected to it. Web 服务器使用 SSL 证书对客户端进行身份验证。The web server uses an SSL certificate to authenticate clients. 该证书在三年后到期,并可随时续订。The certificate expires after three years, and can be renewed at any time.

检查有效期Check expiry

对于 2016 年 5 月之前的配置服务器部署,证书有效期设置为一年。For configuration server deployments before May 2016, certificate expiry was set to one year. 如果证书即将到期,将出现以下情况:If you have a certificate is going to expire, the following occurs:

  • 如果离到期日期有两个月或不到两个月,服务将开始在门户中发送通知以及通过电子邮件发送(如果订阅了 Azure Site Recovery 通知)。When the expiry date is two months or less, the service starts sending notifications in the portal, and by email (if you subscribed to Azure Site Recovery notifications).
  • 保管库资源页上将显示通知横幅。A notification banner appears on the vault resource page. 单击横幅可了解更多详细信息。Click the banner for more details.
  • 如果显示“立即升级”按钮,则表示环境中有些组件尚未升级到 9.4.xxxx.x 或更高版本。If you see an Upgrade Now button, this indicates that there are some components in your environment that haven't been upgraded to 9.4.xxxx.x or higher versions. 在续订证书之前升级组件。Upgrade components before you renew the certificate. 无法在旧版本中进行续订。You can't renew on older versions.

续订证书Renew the certificate

  1. 在保管库中,打开“Site Recovery 基础结构” > “配置服务器”,并单击所需配置服务器。In the vault, open Site Recovery Infrastructure > Configuration Server, and click the required configuration server.
  2. 到期日期显示在“配置服务器运行状况”下The expiry date appears under Configuration Server health
  3. 单击“续订证书”。Click Renew Certificates.

常见问题Common issues

安装失败Installation failures

示例错误消息Sample error message 建议的操作Recommended action
错误...未能加载帐户。ERROR Failed to load Accounts. 错误: System.IO.IOException: 安装和注册 CS 服务器时无法从传输连接读取数据。Error: System.IO.IOException: Unable to read data from the transport connection when installing and registering the CS server. 确保在计算机上启用 TLS 1.0。Ensure that TLS 1.0 is enabled on the computer.

注册失败Registration failures

可以通过查看 %ProgramData%\ASRLogs 文件夹中的日志来调试注册失败。Registration failures can be debugged by reviewing the logs in the %ProgramData%\ASRLogs folder.

示例错误消息Sample error message 建议的操作Recommended action
09:20:06:InnerException.Type: SrsRestApiClientLib.AcsException,InnerException。09:20:06:InnerException.Type: SrsRestApiClientLib.AcsException,InnerException.
消息: ACS50008: SAML 令牌无效。Message: ACS50008: SAML token is invalid.
跟踪 ID: 1921ea5b-4723-4be7-8087-a75d3f9e1072Trace ID: 1921ea5b-4723-4be7-8087-a75d3f9e1072
相关 ID: 62fea7e6-2197-4be4-a2c0-71ceb7aa2d97>Correlation ID: 62fea7e6-2197-4be4-a2c0-71ceb7aa2d97>
时间戳: 2016-12-12 14:50:08Z
Timestamp: 2016-12-12 14:50:08Z
确保系统时钟上的时间与本地时间之间的偏差不超过 15 分钟。Ensure that the time on your system clock is not more than 15 minutes off the local time. 重新运行安装程序完成注册。Rerun the installer to complete the registration.
09:35:27: 尝试获取选定证书的所有灾难恢复保管库时发生 DRRegistrationException:: 引发了 Exception.Type:Microsoft.DisasterRecovery.Registration.DRRegistrationException,Exception.Message: ACS50008: SAML 令牌无效。09:35:27 :DRRegistrationException while trying to get all disaster recovery vault for the selected certificate: : Threw Exception.Type:Microsoft.DisasterRecovery.Registration.DRRegistrationException, Exception.Message: ACS50008: SAML token is invalid.
跟踪 ID: e5ad1af1-2d39-4970-8eef-096e325c9950Trace ID: e5ad1af1-2d39-4970-8eef-096e325c9950
相关 ID: abe9deb8-3e64-464d-8375-36db9816427aCorrelation ID: abe9deb8-3e64-464d-8375-36db9816427a
时间戳: 2016-05-19 01:35:39ZTimestamp: 2016-05-19 01:35:39Z
确保系统时钟上的时间与本地时间之间的偏差不超过 15 分钟。Ensure that the time on your system clock is not more than 15 minutes off the local time. 重新运行安装程序完成注册。Rerun the installer to complete the registration.
06:28:45: 未能创建证书06:28:45:Failed to create certificate
06:28:45: 安装无法继续。06:28:45:Setup cannot proceed. 无法创建用于在 Site Recovery 中进行身份验证的证书。A certificate required to authenticate to Site Recovery cannot be created. 重新运行安装程序Rerun Setup
确保以本地管理员身份运行安装程序。Ensure that you're running setup as a local administrator.

后续步骤Next steps

查看有关设置物理服务器到 Azure 的灾难恢复的教程。Review the tutorials for setting up disaster recovery of physical servers to Azure.