Thanks for the info and I opened a ticket with our support this morning.  I'm just trying to dig thru as much as I can myself before letting someone else come in and fix it.  I didn't answer your question but yes I did add the async as an authorized async on the primary.

thanks for the suggestion.   I did put the password in for the SSL setup.  I'm sure it's something little that I'm not familiar with.

Good Morning,

    I have gone thru both articles and numerous others but I have3 still been unable to get the async DR member out of the waiting  status.  In the portal I went to SYSTEM>JOURNALS>MIRROR JOURNAL FILES and no mirror journal files show up.  Are there cache or windows utilities that I can use to trace the activity between these two machines (primary & async member).  What troubleshooting steps should I take now?

I have verified that the ports are open and in process explorer it appears that the async member goes to the primary successfully but I'm still getting an unable to connect in my console log.

There are no errors in my windows event logs.  I turned on all system events in the audit  log for both servers and there are no errors that show up.

I am on CACHE 2014.1.1.702

Good Morning,

   In reading your article is sounds like I need to create separate SSL certificates for each machine.  Is that correct?  The training book that I was given instructed me to create the certificates for the primary and then copy to the async member.  Will that work or should I create the separate certs?

never mind on the audit db.  I activated auditing and the database mounted.  I have reviewed the encryption info and do not see anything I missed on setting that up.  Reading the SSL article now.

Thanks for the help.  I am reading both articles to see if I missed anything.  I did compare the encryption key on the databases from the primary and async and they match.  I went thru the SSL procedure and everything seem to work correctly and I have the same certs on both machines.  I did notice that on the async server that the cacheaudit database is Unmounted and will not let me mount it.  Is this because it's the DR Async machine or is this an indicator of a problem?

That was a great help.  thank you

cache users.  We are concerned because we were able to use the utility stzzpass to display the passwords.

Sorry I was pull off to other task.  I do get the same results running it in a command window.  I have given the unknown user %all permissions and the job works but we cannot leave it that way.  I need it to run under a special id just for this.

we have to have our backups encrypted and doing an online backup thru the task manager stores the backups unencrypted on disk.

Hello,  I want to thank everyone for there input it was a great help.  I have the powershell script working on my sandbox server.  two things were really important in getting it to work. that was different than what I had found in the documentation.  The first was using -U%SYS rather than _U%%SYS.  the second was putting the freeze command in double quotes like this "##Class(Backup.General).ExternalFreeze()". 

Today I migrated it over to my production server and I'm having one final issue.  Our production server is in lock down security mode and using the example of passing a file with the userid/password I still get access denied.    Tani do you have an example of using windows authentication and will it work with the powershell script? The < in the command <c:\login.scr causes errors in powershell indicating it's a reserved symbol.

I just looked at the profile for the unknownuser and noticed that it failed due to the namespace %%SYS doesn't exist.  I removed one of the % signs and now the access denied message has quit coming up but the system is just sitting there and I'm not getting any response back to powershell nor to the console log.  When I enter the command ..\bin\cache -s. I get the same response and I have to hit ctrl-c to break in.  Screen below is what I'm getting now with the freeze or the -s. command.

Good Morning,  I have turned on Auditing and here is a screen shot of the record produced when I execute the freeze command.  It looks like even though I'm passing the password file that the process is using the unknownuser id.

Command is: 

I put the logfile parameter in but it doesn't create anything.

password file is:

?????<\n>          (userid)

???????<\n>       (password)

Any other suggestions.  I've made all of the suggested changes but I'm still getting access denied and nothing is showing up in the console log 

The description under system>security Management > resources in the portal indicates that %service_Terminal is for Unix.  %service_telnet is for windows and that is set to unauthenticated and is enabled.  I am currently running this command from powershell, that shouldn't be a problem right?

I'm still getting the same error.

login.scr file has

????? <\n>

???????? <\n>