Getting ready

The following are some considerations for using DKM in VMM 2016:

  • When installing a highly available VMM management server, DKM is required.
  • The DKM container should be created in AD before starting with the VMM setup, if you do not have domain administrator rights when installing VMM.
  • You must create the DKM container and the VMM service account in the same domain as the VMM management server.
  • The installation account requires Full Control permissions to the DKM container in AD DS. Also, in the Apply to drop-down menu, choose the This object and all descendant objects option.
  • On the Configure service account and distributed key management page, you must specify the location of the container in AD DS (for example, CN=VMMDKM,DC=rllab,DC=com).
If you do not have the domain admin rights or delegated permissions to execute the following recipe, ask the domain administrator to do it.