Information Technology Reference
In-Depth Information
You deploy gateway servers within the trust boundary of the computer or devices that
you want to monitor. For example, imagine two domains that don't have a trust relationship,
Fabrikam.internal and Fabrikam.perimeter. An Operations Manager management server is
deployed in the Fabrikam.internal domain. Computers that you want to monitor are located
in the Fabrikam.perimeter domain. In this scenario, you would deploy an Operations Manager
gateway server in the Fabrikam.perimeter domain. Authentication between the Operations
Manager management server and the Operations Manager gateway server occurs using
certificates.
To deploy a gateway server, you need to perform the following general steps:
1.
Request certificates for computers or devices that have the Operations Manager agent
installed, will function as the Operations Manager gateway server, or will function as
the Operations Manager management server from a trusted certificate authority. This
can be a third-party certificate authority, or an internal certificate authority.
2.
Use the MOMCertImport.exe tool to import the certificates. The syntax of this com-
mand, used from an elevated command prompt, is:
momcertimport.exe /SubjectName <certificate subject name>
On the Operations Manager management server, use the Microsoft.EnterpriseMan-
agement.GatewayApprovalTool.exe to configure communication between the man-
agement server and the computer that will function as the gateway server using the
following syntax from an elevated command prompt:
3.
Microsoft.EnterpriseManagement.gatewayApprovalTool.exe /ManagementServerName=<mana
gementserverFQDN> /GatewayName=<GatewayFQDN> /Action=Create
Install the gateway server using the Operations Manager installation media.
4.
MORE INFO OPERATIONS MANAGER GATEWAY SERVERS
You can learn more about Operations Manager gateway servers at
http://technet.microsoft.
EXAM TIP
Remember the difference between roles and Run As profiles.
