TMG Stand Alone Arrays - How to create, join and troubleshoot

Arrays consist of redundant members of a TMG deployment that share the same configuration.  There are stand alone arrays and enterprise arrays.  An enterprise array require an EMS server where stand alone arrays do not.  The advantage of the enterprise array is that you can "share configuration items" across all the TMG deployments.  You can also manage all your arrays from one spot. This is very handy if you have a large number of these.

I personally like the idea of discreet standalone arrays.  They operate in isolation from other TMG arrays, yet they are still fully redundant.  You also don't need and EMS.  And in my environment I could never practically get enough enterprise level configurations to justify the need for it, but that is just my environment.

Okay so let us set up a stand alone array.

One the first array member you need to do the following:

• Install TMG SP1 and Update for SP1
• Complete the getting started Wizard

From the TMG management console

• Click Firewall Policy
• On the Toolbox tab, click Network Objects, click Computer Sets, and then double-click Managed Server Computers.
• In the Managed Server Computers Properties dialog box, click Add, select Computer, and enter the details of the server you are adding to the list. Repeat this step for all the array members you want to add to the Managed Server Computers list.
• Apply the configuration, wait for it to be applied and check that all servers are listed.

On the second and other array memebers do the following:

• Install TMG SP1 and Update for SP1
• Complete the getting started Wizard

From the TMG management console

• Click ForeFront TMG (ServerName)
• Click Join Array from the Task tab

• On the Join Membership Type page, click Join a standalone array managed by a designated array member (array manager)

• On the Array Manager Details page, enter the IP address or FQDN of the array manager, and then click Finish.

• 
  
  Then wait, and wait and wait

• 
  
  The following message shows that you have now joined the array

Should your Array manager server fail you will have to specify a new array manager.

To designate a new array manager

• On the server that you wish to designate as the array manager, in the Forefront TMG Management console, on the Tasks tab, click Set as Array Manager.
• On each of the remaining array members, in the Forefront TMG Management console, in the Tasks tab, click Change Array Manager.
• On the Change Array Manager page, enter the IP address or FQDN of the array manager, and then click Finish.

The Technet articles for this is here:

http://technet.microsoft.com/en-us/library/dd440989.aspx

While testing I discovered that machines on the same SP1 and Software Update1 will join into an array without configuring the Managed Server Computers.  I would however still complete this step.

Machines that are not on the same level failed with a critical error path not available.. or something similar.

Machines that require a reboot before joining an array will fail with a RPC call could not be completed failure.