[TMG] Join error: encryption key copy step

While deploying a Forefront TMG EMS replica server with an EMS Master SP1 Update 1 Rollup 3, I got the following installation error.

Indeed when replicating the configuration I got this error message about an encryption key.

After analyzing the setup log and some research about the following errors:

• 0x80070002
• Error 28583
• Error code 1603
• CA ERROR 0x653

I notice that the replica EMS server and also the array members must get the same update level in order to join the EMS master realm.

We have to prepare an installation master with the SP1 Update 1 Rollup 3 splited. In order to do that on a 64bits client or server OS:

• Extract the msp file with the following command: TMG-KBnumber-amd64-GLB.exe /t [destination_folder]
• Split the update with the following command: msiexec /a [TMG_source]\FPC\MS_FPC_Server.msi /p [update_path]\TMG-KBnumber-amd64-GLB.msp