Getting ready
The following are some considerations for using DKM in VMM 2016:
- When installing a highly available VMM management server, DKM is required.
- The DKM container should be created in AD before starting with the VMM setup, if you do not have domain administrator rights when installing VMM.
- You must create the DKM container and the VMM service account in the same domain as the VMM management server.
- The installation account requires Full Control permissions to the DKM container in AD DS. Also, in the Apply to drop-down menu, choose the This object and all descendant objects option.
- On the Configure service account and distributed key management page, you must specify the location of the container in AD DS (for example, CN=VMMDKM,DC=rllab,DC=com).
If you do not have the domain admin rights or delegated permissions to execute the following recipe, ask the domain administrator to do it.