When initially deploying a Forefront Unified Access Gateway (UAG) array, you configure one of the array members as the array manager. This topic describes the steps that you must do if you want to subsequently configure a different array member as the array manager.
The following procedures describe the steps required to change the array manager:
- Configuring a new array member
as the array manager
- Configuring array members
to use the new array manager
- Removing the original array
manager from the array members list
- Reconfiguring the original array
manager as an array member
Configuring an array member as the new array manager
Set an array member as the new array manager as follows.
To configure the new array manager
-
Ensure that the Forefront UAG Management console on the original array manager is closed.
-
On the Forefront UAG array member that will be the new array manager, open the Forefront UAG Management console. The Array Management Wizard opens automatically.
-
On the Configure Array Settings page, click Set this server as the array manager.
-
On the Specify Array Credentials page, enter credentials that this array manager should use when connecting to array members.
You must provide credentials with an array administrator role in Forefront Threat Management Gateway (TMG) running on the Forefront UAG server. By default, the user that installs Forefront UAG has an array administrator role. If you want to use a different account, note the following:
- It must be a domain account that is
recognized by all array members.
- The account should have local administrator
permissions on the array manager server, and on all array
members.
- It is recommended to use an account with a
long expiry period.
- Ensure that you are logged on to the server,
with the credentials that you will specify when running the Array
Management Wizard.
- It must be a domain account that is
recognized by all array members.
-
On the Defining Array Member Computers page, click Add to add the computer name and IP address of all array members. Do not remove the list entry for the original array manager at this stage. Then complete the wizard.
Important: Do not remove the local server; that is, the new array manager, from the list. Note: It might take a few minutes for the array settings to be updated. -
Close the Forefront UAG Management console.
Configuring array members to use the new array manager
Set the array members to use the new array manager as follows.
To change the array manager used by array members
-
On the Forefront UAG server on which you want to change the array manager, open the Forefront UAG Management console. The Array Management Wizard opens automatically.
-
On the Configure Array Settings page, click Change the array manager used by this server.
-
On the Select Array Manager page, specify the computer name or IP address of the internal adapter of the new array manager, or click Browse to select it.
-
On the Changing Array Manager page, click Finish.
Important: |
---|
If you configure a new array manager for a Forefront UAG array that is running Forefront UAG DirectAccess, ensure that you update the Host file on each array member to point to the new array manager. The Host file entry should contain the IPv4 address for the array manager name. |
Removing the original array manager from the array members list
On the new array manager, remove the original array manager from the array member list as follows.
To remove the original array manager
-
On the new Forefront UAG array manager server, in the Forefront UAG Management console, on the Admin menu, click Array Management to open the Array Management Wizard.
-
On the Configure Array Settings page, click Specify array credentials.
-
On the Specify Array Credentials page, click Next.
-
On the Defining Array Member Computers page, select the original array manager in the array members list, and then click Remove.
Important: Do not remove the new array manager from the list. -
On the taskbar of the console, click the Activate configuration icon, then on the Activate Configuration dialog box, click Activate.
Reconfiguring the original array manager as an array member
If the original array manager server is available, you can optionally add it to the new array manager as an array member, as follows.
To reconfigure the array manager
-
On the original Forefront UAG array manager server, in the Forefront UAG Management console, on the Admin menu, click Array Management to open the Array Management Wizard.
-
On the Configure Array Settings page, click Specify array credentials.
-
On the Specify Array Credentials page, click Next.
-
On the Defining Array Member Computers page, select each server that appears in the array members list, and then click Remove.
Note: You cannot remove the server on which you are performing this procedure. -
At the end of the wizard, click Finish.
-
If integrated network load balancing (NLB) using virtual IP (VIP) addresses is configured, you must remove the VIPs manually. For information about NLB, see Configuring NLB for a Forefront UAG array.
-
Activate the configuration.
The original array manager is now configured as a single server. If you want to join it to an array, see Joining a server to an array.
Next Steps
After configuring an alternate array member to act as the array manager server, ensure that Forefront Threat Management Gateway (TMG) is configured to use the new array manager for reporting. To do this, in the Forefront TMG Management console, click the Logs and Reports node. On the Reporting tab, click Configuring Reporting Settings. Then, on the Report Server tab, select the new array manager server from the Report Server dropdown list.