![\"rca0\"](\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2013\/10\/rca0.jpg\" "\\"rca0\\"")
<\/a> <\/p>\n\u5efa\u7acb\u6191\u8b49\u7bc4\u672c<\/p>\n
\u958b\u555f\u6191\u8b49\u4e3b\u63a7\u53f0 > \u6191\u8b49\u7bc4\u672c > \u6ed1\u9f20\u53f3\u9375 > \u7ba1\u7406<\/p>\n
\u627e\u5230 > \u5de5\u4f5c\u7ad9\u9a57\u8b49 > \u6ed1\u9f20\u53f3\u9375 > \u8907\u88fd\u7bc4\u672c<\/p>\n \u4fee\u6539\u7bc4\u672c\u5167\u5bb9<\/p>\n \u4e00\u822c\u6a19\u7c64 : \u4fee\u6539\u7bc4\u672c\u540d\u7a31\u70ba Hyper-V Replica<\/p>\n \u767c\u884c\u9700\u6c42\u6a19\u7c64 : \u52fe\u9078 [\u8981\u6709CA\u6191\u8b49\u7ba1\u7406\u54e1\u6838\u51c6]<\/p>\n \u5b89\u5168\u6027\u6a19\u7c64 : Authenticated Users \u52fe\u9078 [\u8a3b\u518a]<\/p>\n \u4e3b\u9ad4\u540d\u7a31\u6a19\u7c64 : \u9078\u64c7 [\u5728\u8981\u6c42\u4e2d\u63d0\u4f9b]<\/p>\n \u5ef6\u4f38\u6a19\u7c64 : \u9078\u64c7[\u61c9\u7528\u7a0b\u5f0f\u539f\u5247] > \u9ede\u9078 [\u7de8\u8f2f]<\/p>\n \u9ede\u9078 [\u65b0\u589e] > \u9ede [\u4f3a\u670d\u5668\u9a57\u8b49] > \u9ede\u9078 [\u78ba\u5b9a]<\/p>\n \u8a2d\u5b9a\u5b8c\u7562\u5f8c\uff0c\u5728\u61c9\u7528\u7a0b\u5f0f\u63cf\u8ff0\u5c31\u6703\u770b\u5230 [\u7528\u6236\u7aef\u9a57\u8b49]\u53ca[\u4f3a\u670d\u5668\u9a57\u8b49]<\/p>\n \u7bc4\u672c\u5efa\u7acb\u5b8c\u7562<\/p>\n \u5728\u6191\u8b49\u6388\u6b0a\u55ae\u4f4d > \u6191\u8b49\u7bc4\u672c > \u6ed1\u9f20\u53f3\u9375 > \u65b0\u589e > \u9078 [\u8981\u767c\u51fa\u7684\u6191\u8b49\u7bc4\u672c]<\/p>\n \u9078\u64c7\u524d\u9762\u6b65\u9a5f\u5efa\u7acb\u7684Hyper-v Replica\u7bc4\u672c<\/p>\n Hyper-V\u4e3b\u6a5f\u8981\u6c42\u6191\u8b49 (HV01 & HV02 \u90fd\u8981\u505a)<\/p>\n \u5efa\u7acbinf \u6a94\u6848\u8981\u6c42\u6191\u8b49<\/p>\n \u958b\u555f\u8a18\u4e8b\u672c\uff0c\u5c07\u4e0b\u5217\u5167\u5bb9\u8cbc\u4e0a<\/p>\n \u4fee\u8a72\u90e8\u5206 <\/p>\n Subject = “CN=HV01.lab.com” ====> \u5728HV02\u4e3b\u6a5f\u8981\u63db\u6210 HV02.lab.com<\/p>\n CertificateTemplate = “Hyper-V Replica” ===> \u65b0\u589e\u7684\u7bc4\u672c\u540d\u7a31<\/p>\n —————————————————————————–<\/p>\n [Version] [NewRequest] [RequestAttributes] —————————————————————————–<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n \u5c07hv01.inf \u5b58\u653e\u5728C\u78c1\u789f<\/p>\n \u958b\u555f\u547d\u4ee4\u63d0\u793a\u5b57\u5143(\u63d0\u5347\u81f3\u7ba1\u7406\u8005\u6b0a\u9650) \uff0c\u5efa\u7acb\u65b0\u6191\u8b49\u8981\u6c42\u6a94\u6848<\/p>\n \u6307\u4ee4 : certreq \u2013new c:\\hv01.inf c:\\hv01.req<\/p>\n \u57f7\u884c\u5b8c\u7562\u5728 C\u78c1\u789f\u6703\u7522\u751f hv01.req<\/p>\n \u8f38\u5165\u4e0b\u5217\u6307\u4ee4\u9001\u51fa\u6191\u8b49\u8981\u6c42<\/p>\n certreq \u2013submit -config \u201cca\\root\u201d c:\\hv01.req c:\\hv01.cer<\/p>\n \u56de\u5230CA\u4f3a\u670d\u5668\uff0c\u6838\u51c6\u8a72\u6191\u8b49\u8981\u6c42<\/p>\n \u958b\u555f\u6191\u8b49\u6388\u6b0a\u55ae\u4f4d > \u64f1\u7f6e\u8981\u6c42 > \u5728\u8981\u6c42\u6191\u8b49\u4e0a > \u6ed1\u9f20\u53f3\u9375 > \u6240\u6709\u5de5\u4f5c > \u9ede\u9078[\u767c\u884c]<\/p>\n \u767c\u884c\u5f8c\uff0c\u5728[\u5df2\u767c\u51fa\u7684\u6191\u8b49]\u5c31\u6703\u770b\u5230<\/p>\n \u56de\u5230HV01\uff0c\u8f38\u5165\u4e0b\u5217\u6307\u4ee4\u53d6\u5f97\u5df2\u7d93\u6838\u51c6\u767c\u884c\u7684\u6191\u8b49<\/p>\n \u6307\u4ee4 : certreq \u2013retrieve 3 hv01.cer<\/p>\n \u57f7\u884c\u5f8c\u6703\u5f48\u51fa [\u6191\u8b49\u6388\u6b0a\u55ae\u4f4d\u6e05\u55ae]\u8996\u7a97\uff0c\u9ede\u9078[\u78ba\u5b9a]<\/p>\n \u53d6\u5f97\u6191\u8b49\u5b8c\u6210\u5f8c(\u5982\u4e0b\u5716)<\/p>\n<\/p>\n<\/p>\n<\/p>\n \u5728c\u78c1\u789f\u7522\u751f hv01.cer<\/p>\n \u5728hv01.cer \u6a94\u6848\u4e0a > \u6ed1\u9f20\u53f3\u9375 > \u9078 [\u5b89\u88dd\u6191\u8b49]<\/p>\n \u51fa\u73fe\u532f\u5165\u7cbe\u9748 > \u5b58\u653e\u4f4d\u7f6e\u81f3\u9078\u64c7 [\u672c\u6a5f\u96fb\u8166] > \u9ede\u9078 [\u4e0b\u4e00\u6b65]<\/p>\n > \u6191\u8b49\u5b58\u653e\u5340 >\u9ede\u9078 [\u700f\u89bd] \u9078\u64c7[\u500b\u4eba] > \u9ede\u9078 [\u4e0b\u4e00\u6b65]<\/p>\n \u9ede\u9078[\u5b8c\u6210]\uff0c\u5373\u53ef\u532f\u5165\u6191\u8b49<\/p>\n \u4f9d\u7167\u4e0a\u8ff0\u6b65\u9a5f\uff0c\u5728HV02\u4e3b\u6a5f\u7522\u751f\u6191\u8b49\u4e26\u532f\u5165<\/p>\n HV01 & HV02\u555f\u7528\u8907\u5beb\u8a2d\u5b9a: <\/p>\n \u5148\u8a2d\u5b9aHV01\u4e3b\u6a5f \u9ede\u9078 > \u9078\u53d6\u6191\u8b49 > \u6703\u8df3\u51fa\u6191\u8b49\u76f8\u95dc\u8cc7\u8a0a <\/p>\n \u52fe\u9078[\u5141\u8a31\u4f86\u81ea\u4efb\u4f55\u5df2\u9a57\u8b49\u4e4b\u4f3a\u670d\u5668\u7684\u8907\u5beb] <\/p>\n \u78ba\u8a8d\u5f8c\u6703\u51fa\u73fe\u63d0\u793afirewall 443 port \u9700\u8981\u5141\u8a31\u901a\u904e<\/p>\n \u555f\u7528Firewall \u898f\u5247 > [Hyper-v <\/b>\u8907\u672cHTTPS\u63a5\u807d\u7a0b\u5f0f(TCP-In)]<\/b> <\/p>\n \u4f9d\u7167\u4e0a\u8ff0\u6b65\u9a5f\u5c07HV02\u8907\u5beb\u8a2d\u5b9a\u555f\u7528\u5373\u53ef\u3002 <\/p>\n \u8a2d\u5b9a\u865b\u64ec\u6a5f\u5668\u8907\u5beb\u81f3HV02\u4e3b\u6a5f: <\/p>\n \u5728HV01\u958b\u555fHyper-V\u7ba1\u7406\u5de5\u5177 > win7 \u865b\u64ec\u6a5f\u5668\u6ed1\u9f20\u53f3\u9375 > \u555f\u7528\u8907\u5beb <\/p>\n \u6307\u5b9a\u8907\u672c\u4f3a\u670d\u5668 HV02<\/p>\n \u9ede\u9078 > [\u9078\u53d6\u6191\u8b49] <\/p>\n \u9078\u64c7\u8907\u5bebVHD<\/p>\n \u8a2d\u5b9a\u5fa9\u539f\u6b77\u7a0b\u8a18\u9304 <\/p>\n \u9078\u64c7\u521d\u59cb\u8907\u5beb\u65b9\u6cd5 <\/p>\n \u78ba\u8a8d\u8907\u5beb\u8a2d\u5b9a\uff0c\u82e5\u6b63\u78ba\u7121\u8aa4\u9ede\u9078[\u5b8c\u6210]\u5373\u958b\u59cb\u8907\u5beb\u3002 <\/p>\n \u958b\u59cb\u50b3\u9001\u53ca\u63a5\u6536\u8cc7\u6599 <\/p>\n \u6aa2\u8996\u76ee\u524d\u8907\u5beb\u72c0\u614b(\u5982\u4e0b\u5716\uff0c\u5df2\u5b8c\u6210\u521d\u59cb\u8907\u672c\u50b3\u9001)\u3002 <\/p>\n \u53c3\u8003\u8cc7\u6599<\/p>\n 1. Requesting Hyper-V Replica Certificates from an Enterprise CA<\/a><\/p>\n 2. Hyper-v Replica Certificate Based with your own Root Authority<\/a><\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n
Signature=”$Windows NT$ <\/p>\n
Subject = “CN=HV01.lab.com”
Exportable = TRUE
KeyLength = 2048
KeySpec = 1
KeyUsage = 0xA0
MachineKeySet = True
ProviderName = “Microsoft RSA SChannel Cryptographic Provider”
ProviderType = 12
RequestType = CMC<\/p>\n
CertificateTemplate = “Hyper-V Replica”<\/p>\n<\/a><\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n
\u5728\u8907\u5beb\u8a2d\u5b9a>\u52fe\u9078[\u555f\u7528\u6b64\u96fb\u8166\u70ba\u8907\u672c\u4f3a\u670d\u5668] > \u52fe\u9078 [\u4f7f\u7528\u6191\u8b49\u5f0f\u9a57\u8b49] <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/p>\n<\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/a> <\/p>\n<\/p>\n<\/a> <\/p>\n