count. Which type of account should I use? Local System account Domain account User name and domain: Password: Select.. Distributed Key Management Select whether to store encryption keys in Active Directory instead of on the local machine. Highly available VMM installations require the keys be stored in Active Directory. Store my keys in Active Directory Provide the location in Active Directory. For example, CN=DKM,DC=contoso,DC=com. How do configure distributed key management? Previous Cancel It is required to always store your encryption keys in Active Directory if you are going to deploy a highly available (clustered) installation of VMM. The account used to install VMM must have full control over the container in Active Directory for the duration of the installation. During the installation, the installer program reconfigures the security of the container to ensure that only the correct security principles have access. For a small scale installation, a single container in the root of Active Directory could be created to store the encryption keys. For a large-scale implementation where several different installations of VMM may be required due to the number of hosts and/or virtual machines, it is advisable to create a parent container in Active Directory and then have containers within the parent for each installation of VMM. Installing Virtual Machine Manager Getting ready You will need to have sufficient access to Active Directory to create Container objects. How to do it... The following diagram shows you the high-level steps involved in this recipe and the tasks required to complete this recipe: Overview of Recipe: Prerequisites (not covered by this recipe): Obtaining an account with sufficient privileges for creating a container in Active Directory Obtaining an account with sufficient privileges for changing ACLs on the new container in Active Directory Actions: Creation of new container in Active Directory for Distributed Key Management in VMM using PowerShell Applying the required security permissions t