Question : Configuration Status error on TMG 2010 Enterprise

Hi, I'm having some weird errors in the GUI of TMG 2010 as was hoping for some help.

I have installed two TMG 2010 Enterprise servers which are both in a workgroup. I have created a standalone array with SERVER1 being the array manager and SERVER2 being the array managed node. I followed all of the TMG help for setting up a standalone array on a workgroup machine and don't think i have missed anything but you never know i guess.

The problem I have is as follows...

The array was created successfully. On SERVER2  (the server I selected "Join an array") the status of both SERVER1 and SERVER2 under System->Servers is good (green ticks) and under Monitoring->Configuration both servers appear as Synced and all good with green ticks. There are no errors in the GUI when administering from this server (which connects to the array manager SERVER1). However, when I log onto SERVER1 (array manager) and load the Forefront TMG console, if I select "Firewall Policy" I get the error "Refresh failed. You do not have the necessary permission to perform this operation". I'm not even trying to change anything, just view the Firewall Policy Node. Under System->Servers both SERVER1 and SERVER2 are listed as good (green ticks), but under Monitoring->Configuration I have SERVER1 as good and Synced, but SERVER2 in Error status. The description says "Server is unable to update the configuration (see Alerts tab)". I can't see anything all on the alerts tab as I once again get the error "Refresh failed. You do not have the necessary permission to perform this operation".

Any ideas why Syncing seems to be fine from the perspective of one of the servers but not from the other. Any ideas how to fix my problem? Any help would be greatly appreciated.

Thanks.

Answer : Configuration Status error on TMG 2010 Enterprise

Hi,

Configuring authentication :

On the array name, in the Forefront TMG Management console, on the Tasks tab, click Configure array properties.

Click the Configuration Storage tab, and then click Select.
Click Authentication over SSL encrypted channel.

A digital certificate must be installed on the configuration storage server to enable authentication to the Forefront TMG computers in the array.

Assigning roles to users :

On the array name, in the Forefront TMG Management console, on the Tasks tab, click Configure array properties.

Click the Assign Roles tab.

Are you using user in the Enterprise-level administrative roles ?

Thanks