Set up two standalone Hyper-V 2012R2 servers as replication partners (port 443)
Scenario: You have two standalone Windows 2012 r2 with Hyper-V installed, you need to setup replica between each other. for DR propose.
Prerequisite:
FQDN Name both two standalone Windows 2012R2 server.
DNS Server records or add into hosts file in windows\system32\drivers\etc\hosts. add to hosts will be use at this posts
Makecert.exe download and install both two standalone server in https://www.microsoft.com/en-us/download/details.aspx?id=8279
FQDN Name both two standalone Windows 2012R2 server. (you must FQDN name for example testhost.tplhk.local and testreplica.tplhk.local will be used. *** only netbios (testhost) name doen’t work ***)
To add FQDN name both two standalone server -> Right click Windows menus -> system -> advanced system settings -> computer name -> change -> more type Primary DNS suffix of this computer “tplhk.local” in this sample. so FQDN name will be “testhost.tplhk.local” in primary host , “testreplica.tplhk.local” in replica host. restart both windows server.
Modify hosts files both two standalone windows server. testhost.tplhk.local is primary hyper-v host in this sample testreplia.tplhk.local is replica hyper-v host in this sample
Makecert both primary and replica windows server 2012. (please refer to the below link for more detail)
https://blogs.technet.microsoft.com/virtualization/2013/04/13/hyper-v-replica-certificate-based-authentication-makecert/
=================== On Primary Host testhost.tplhk.local
===================
makecert -pe -n "CN=HostRootCA" -ss root -sr LocalMachine -sky signature -r "HostRootCA.cer"
makecert -pe -n "CN=testhost.tplhk.local" -ss my -sr LocalMachine -sky exchange -eku 1.3.6.1.5.5.7.3.1,1.3.6.1.5.5.7.3.2 -in "HostRootCA" -is root -ir LocalMachine -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12 testhost.cer
*** copy ReplicaRootCa.cer from testreplica.tplhk.local *******
certutil -addstore -f Root “ReplicaRootCA.cer”
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization\Replication" /v DisableCertRevocationCheck /d 1 /t REG_DWORD /f
=================== On replica Host testreplica.tplhk.local
===================
makecert -pe -n "CN=ReplicaRootCA" -ss root -sr LocalMachine -sky signature -r "ReplicaRootCA.cer"
makecert -pe -n "CN=testreplica.tplhk.local" -ss my -sr LocalMachine -sky exchange -eku 1.3.6.1.5.5.7.3.1,1.3.6.1.5.5.7.3.2 -in "ReplicaRootCA" -is root -ir LocalMachine -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12 testreplica.cer
*** copy HostRootCa.cer from testhost.tplhk.local *******
certutil -addstore -f Root “HostRootCA.cer”
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization\Replication" /v DisableCertRevocationCheck /d 1 /t REG_DWORD /f
Export testhost.tplhk.local and import to testreplica.tplhk.local run MMC and snap-in certification as the below
copy testhost.pfx to testreplica.tplhk.local
and double click testhost.pfx to import cert in testreplica.tplhk.local server.
Export testreplica.tplhk.local and import to testhost.tplhk.local run MMC and snap-in certification same as above.
copy testreplica.pfx to testhost.tplhk.local
and double click testreplica.pfx to import cert. in testhost.tplhk.local server.
*** finished connection between two standalone windows hyper-v server, you should establish connection between each other to perform Hyper-v replica ***
