Sealing a Management Pack in R2

I published a post sometime ago on how to seal a management pack (http://www.aquilaweb.com/blog/index.php?itemid=85) but things are now a bit easier in OpsMgr R2.  The install media for R2 includes the installer for the new Authoring Console which now provides functionality for sealing management packs.  It doesn't completely simplify what is required to seal an MP as you still need to generate your own SNK file but at least you no longer need a long command line to perform the sealing.

Before sealing a management, or even generating the key required, there are a couple of prerequisites.

The steps below outline how to generate a key and get the public key token (lifted straight from my original post).

For key generation you will require .NET Framework 2.0 and any one of these:

.NET Framework SDK
Microsoft Visual Studio 2005
Business Intelligence Development Studio (from SQL 2005 Client Components)

 

For management pack sealing you will require:

System Center Operations Manager 2007 R2 Authoring Console (available on install media)

 

Once the prereq's have been met you can now create your key and seal up your management pack.

1. Create the key file by running this command: sn -k c:\pairkey.snk

Create Key

 

2. Extract the public key to file: sn -p c:\pairkey.snk c:\pubkey

Extract Public Key

 

3. Extract public key and public key token from file: sn -tp c:\pubkey

Public Token


Here is where things get a bit easier, once you have your SNK key you can now open the Authoring Console and seal your MP.

1.  Open your unsealed MP that needs sealing within the Authoring Console.

2.  Select File, Save As, Sealed and Signed Management Pack.

Save as Sealed MP

 

3. Select a location to save your new sealed MP and click Save.

Save Sealed MP

 

4. Enter your Company Name and Copyright information and then select your SNK file created previously in the Choose a key file field.  Click OK.

MP Sealing Details

 

5.  That's it, your sealed MP has been generated in the save location you specified.

 

Now your sealed MP has been created you can now import it into your environment.  Remember though that you cannot import a sealed MP when an unsealed MP already exists with the same name.  If you were previously working with an unsealed copy of your MP, delete it then import your sealed version.

Also, MPSeal.exe is still available within the Support Tools folder on the install media if for some reason you prefer to seal using the command line.  Instructions here, http://www.aquilaweb.com/blog/index.php?itemid=85.

 

Hopefully that will make some of your lives a bit easier :-)

 

David