Dear all,
when I tried to configure a Windows Server 2016 machine as a branch cache I found that I cannot bind a certificate to the cache the same way as I was used to do that in 2008 or 2012. The netsh command failed (details below). In the result m branch cache server
does not start caching. Let's have a look at the Get-BCStatus output first:
PS C:\> Get-BCStatus
BranchCacheIsEnabled : True
BranchCacheServiceStatus : Running
BranchCacheServiceStartType : Automatic
ClientConfiguration:
CurrentClientMode : LocalCache
HostedCacheServerList :
HostedCacheDiscoveryEnabled : False
ContentServerConfiguration:
ContentServerIsEnabled : True
HostedCacheServerConfiguration:
HostedCacheServerIsEnabled : True
ClientAuthenticationMode : None
HostedCacheScpRegistrationEnabled : False
NetworkConfiguration:
ContentRetrievalUrlReservationEnabled : True
HostedCacheHttpUrlReservationEnabled : True
HostedCacheHttpsUrlReservationEnabled : True
ContentRetrievalFirewallRulesEnabled : True
PeerDiscoveryFirewallRulesEnabled : True
HostedCacheServerFirewallRulesEnabled : True
HostedCacheClientFirewallRulesEnabled : True
HashCache:
CacheFileDirectoryPath : C:\Windows\ServiceProfiles\NetworkService\AppData\Local\PeerDistPub
MaxCacheSizeAsPercentageOfDiskVolume : 95
MaxCacheSizeAsNumberOfBytes : 128982131655
CurrentSizeOnDiskAsNumberOfBytes : 29450240
CurrentActiveCacheSize : 0
DataCache:
CacheFileDirectoryPath : D:\BranchCache
MaxCacheSizeAsPercentageOfDiskVolume : 95
MaxCacheSizeAsNumberOfBytes : 129417389640
CurrentSizeOnDiskAsNumberOfBytes : 286220306
CurrentActiveCacheSize : 0
DataCacheExtensions:
As you can see the CurrentActiveCacheSize for the datacache as well as the hashcache is always 0.
When I ran show status all on the client I can see a report for something something is wrong for the firewall rules as well as the certificate is not configured for the branch cache.
PS C:\> netsh branchcache show status all
BranchCache Service Status:
-------------------------------------------------------------------------------
Service Mode = Hosted Cache Server
Client Authentication = No Authentication
Current Status = Running
Service Start Type = Automatic
This machine is currently configured as a hosted cache server.
Local Cache Status:
-------------------------------------------------------------------------------
Maximum Cache Size = 95% of hard disk
Active Current Cache Size = 0 Bytes
Local Cache Location = D:\BranchCache
Publication Cache Status:
-------------------------------------------------------------------------------
Maximum Cache Size = 95% of hard disk
Active Current Cache Size = 0 Bytes
Publication Cache Location = C:\Windows\ServiceProfiles\NetworkService\AppData\Local\PeerDistPub (Default)
Networking Status:
-------------------------------------------------------------------------------
Content Retrieval URL Reservation = Configured (Required)
Hosted Cache URL Reservation = Configured (Required)
Hosted Cache HTTP URL Reservation = Configured (Required)
SSL Certificate Bound To Hosted Cache Port = Not Configured (Not Required)
Content Retrieval Firewall Rules = Enabled (Required)
Peer Discovery Firewall Rules = Enabled (Not Required)
Hosted Cache Server Firewall Rules = Enabled (Required)
Hosted Cache Client Firewall Rules = Enabled (Not Required)
Warning: There is no certificate bound to the Hosted Cache Port. A Hosted Cache SSL Certificate is required to serve Win
dows 7 clients or to serve Vista clients which are using the BITS protocol.
PS C:\>
On older systems, I used the netsh statement from https://technet.microsoft.com/en-us/library/ee649233(v=ws.10).aspx to configure the certifcate, and the syntax seems to be correct as the netsh command still works if I applied the next command on a
Windows Server 2008 R2 / 2012 machine (I did the same test on an older test machine). For my new Windows Server 1016 server it does not:
CMD C:\> netsh http add sslcert ipport=0.0.0.0:443 certhash=f283df6088f28bd52a462418d5b504a80273b921 appid={d673f5ee-a714-454d-8de2-492e4c1bd8f8}
The parameter is incorrect.
This is also reported by several other threads, but I did not see a resolution. It does not matter if I ran this from an elevatedd Powershell or cmd.
Any help about how to resolve that? Is there a way to configure the certificate by using a Powershell cmdlet / changing a registry key or similar?
Please help. Thank you.
Best regards,
Martin
