1. On the desktop, click Start, click All Programs, click Microsoft SQL Server 2008 R2, click Configuration Tools, and then click Reporting Services Configuration Manager.

2. In the Reporting Services Configuration Connection dialog box, specify the name of the server that is hosting SQL Server Reporting Services, on the menu, select the instance of SQL Server on which you installed SQL Reporting Services, and then click Connect. The Reporting Services Configuration Manager opens.

3. On the Report Server Status page, verify that Report Service Status is set to Started. If it is not, click Start.

4. On the Web Service URL page, click the URL in Report Service Web Service URLs to test the connection to the report folder. The Windows Security dialog box might open and prompt you for security credentials. By default, your user account is displayed. Enter your password and click OK. Verify that the webpage opens successfully. Close the browser window.

5. On the Database page, verify that the Report Server Mode setting is configured by using Native.

6. On the Report Manager URL page, click the URL in Report Manager Site Identification to test the connection to the virtual directory for Report Manager. The Windows Security dialog box might open and prompt you for security credentials. By default, your user account is displayed. Enter your password and click OK. Verify that the webpage opens successfully. Close the browser window.

   Note
   Reporting Services Report Manager is not required for Reporting in Configuration Manager, but it is required if you want to run reports on an Internet browser or manage reports by using Report Manager.

7. Click Exit to close Reporting Services Configuration Manager.

1. On the computer running the Configuration Manager console, open the Windows Registry Editor.

2. Browse to HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Microsoft/ConfigMgr10/AdminUI/Reporting.

3. Double-click the ReportBuilderApplicationManifestName key to edit the value data.

4. Change ReportBuilder_2_0_0_0.application to ReportBuilder_3_0_0_0.application, and then click OK.

5. Close the Windows Registry Editor.

1. In the Configuration Manager console, click Administration.

2. In the Administration workspace, expand Site Configuration, and then click Servers and Site System Roles.

   Tip
   To list only site systems that host the reporting services point site role, right-click Servers and Site System Roles to select Reporting services point.

3. Add the reporting services point site system role to a new or existing site system server by using the associated step:

   Note
   For more information about configuring site systems, see Install and Configure Site System Roles for Configuration Manager.

   • New site system: On the Home tab, in the Create group, click Create Site System Server. The Create Site System Server Wizard opens.
     
     
   • Existing site system: Click the server on which you want to install the reporting services point site system role. When you click a server, a list of the site system roles that are already installed on the server are displayed in the results pane.
     
     On the Home tab, in the Server group, click Add Site System Role. The Add Site System Roles Wizard opens.
     
     

4. On the General page, specify the general settings for the site system server. When you add the reporting services point to an existing site system server, verify the values that you previously configured.

5. On the System Role Selection page, select Reporting services point in the list of available roles, and then click Next.

6. On the Reporting services Point page, configure the following settings:

   • Site database server name: Specify the name of the server that hosts the Configuration Manager site database. Typically, the wizard automatically retrieves the fully qualified domain name (FQDN) for the server. To specify a database instance, use the format <Server Name>\<Instance Name>.
     
     
   • Database name: Specify the Configuration Manager site database name, and then click Verify to confirm that the wizard has access to the site database.
     
     

     Security Note
     The user account that is creating the reporting services point must have Read access to the site database. If the connection test fails, a red warning icon appears. Move the cursor over this icon to read details of the failure. Correct the failure, and then click Test again.

   • Folder name: Specify the folder name that is created and used to host the Configuration Manager reports in Reporting Services.
     
     
   • Reporting Services server instance: Select in the list the instance of SQL Server for Reporting Services. When there is only one instance found, by default, it is listed and selected. When no instances are found, verify that SQL Server Reporting Services is installed and configured, and that the SQL Server Reporting Services service is started on the site system.
     
     

     Security Note
     Configuration Manager makes a connection in the context of the current user to Windows Management Instrumentation (WMI) on the selected site system to retrieve the instance of SQL Server for Reporting Services. The current user must have Read access to WMI on the site system, or the Reporting Services instances cannot be retrieved.

   • Reporting Services Point Account: Click Set, and then select an account to use when SQL Server Reporting Services on the reporting services point connects to the Configuration Manager site database to retrieve the data that are displayed in a report. Select Existing account to specify a Windows user account that has previously been configured as a Configuration Manager account, or select New account to specify a Windows user account that is not currently configured as a Configuration Manager account. Configuration Manager automatically grants the specified user access to the site database. The user is displayed in the Accounts subfolder of the Security node in the Administration workspace with the ConfigMgr Reporting Services Point account name.
     
     The account that runs Reporting Services must belong to the domain local security group Windows Authorization Access Group, and have the Read tokenGroupsGlobalAndUniversal permission set to Allow.
     
     The specified Windows user account and password are encrypted and stored in the Reporting Services database. Reporting Services retrieves the data for reports from the site database by using this account and password.
     
     

     Security Note
     The account that you specify must have Log on Locally permissions on the computer hosting the Reporting Services database.

7. On the Reporting Services Point page, click Next.

8. On the Summary page, verify the settings, and then click Next to install the reporting services point.

   After the wizard is completed, report folders are created, and the Configuration Manager reports are copied to the specified report folders.

   Note

   When report folders are created and reports are copied to the report server, Configuration Manager determines the appropriate language for the objects. If the associated language pack is installed on the site, Configuration Manager creates the objects in the same language as the operating system running on the report server on the site. If the language is not available, the reports are created and displayed in English. When you install a reporting services point on a site without language packs, the reports are installed in English. If you install a language pack after you install the reporting services point, you must uninstall and reinstall the reporting services point for the reports to be available in the appropriate language pack language. For more information about language packs, see Technical Reference for Language Packs in Configuration Manager.

Configuration Manager performs the following actions to install the reporting services point and to configure Reporting Services:

Security Note
The actions in the following list are performed by using the credentials of the account that is configured for the SMS_Executive service, which typically is the site server local system account.

• Installs the reporting services point site role.
  
  
• Creates the data source in Reporting Services with the stored credentials that you specified in the wizard. This is the Windows user account and password that Reporting Services uses to connect to the site database when you run reports.
  
  
• Creates the Configuration Manager root folder in Reporting Services.
  
  
• Adds the ConfigMgr Report Users and ConfigMgr Report Administrators security roles in Reporting Services.
  
  
• Creates subfolders and deploys Configuration Manager reports from %ProgramFiles%\SMS_SRSRP to Reporting Services.
  
  
• Adds the ConfigMgr Report Users role in Reporting Services to the root folders for all user accounts in Configuration Manager that have Site Read rights.
  
  
• Adds the ConfigMgr Report Administrators role in Reporting Services to the root folders for all user accounts in Configuration Manager that have Site Modify rights.
  
  
• Retrieves the mapping between report folders and Configuration Manager secured object types (maintained in the Configuration Manager site database).
  
  
• Configures the following rights for administrative users in Configuration Manager to specific report folders in Reporting Services:
  
  
  • Adds users and assigns the ConfigMgr Report Users role to the associated report folder for administrative users who have Run Report permissions for the Configuration Manager object.
    
    
  • Adds users and assigns the ConfigMgr Report Administrators role to the associated report folder for administrative users who have Modify Report permissions for the Configuration Manager object.
    
    
  Configuration Manager connects to Reporting Services and sets the permissions for users on the Configuration Manager and Reporting Services root folders and specific report folders. After the initial installation of the reporting services point, Configuration Manager connects to Reporting Services in a 10-minute interval to verify that the user rights configured on the report folders are the associated rights that are set for Configuration Manager users. When users are added or user rights are modified on the report folder by using Reporting Services Report Manager, Configuration Manager overwrites those changes by using the role-based assignments stored in the site database. Configuration Manager also removes users that do not have Reporting rights in Configuration Manager.
  
  

1. In the Configuration Manager console, click Monitoring.

2. In the Monitoring workspace, expand System Status, and then click Component Status.

3. Click SMS_SRS_REPORTING_POINT in the list of components.

4. On the Home tab, in the Component group, click Show Messages, and then click All.

5. Specify a date and time for a period before you installed the reporting services point, and then click OK.

6. Verify that status message ID 1015 is listed, which indicates that the reporting services point was successfully installed. Alternatively, you can open the Srsrp.log file, located in <ConfigMgr Installation Path>\Logs, and look for Installation was successful.

   In Windows Explorer, navigate to <ConfigMgr Installation Path>\Logs.

7. Open Srsrp.log and step through the log file starting from the time that the reporting services point was successfully installed. Verify that the report folders were created, the reports were deployed, and the security policy on each folder was confirmed. Look for Successfully checked that the SRS web service is healthy on server after the last line of security policy confirmations.

1. Perform the following steps on the site server to export the self-signed certificate:

   1. Click Start, click Run, and type mmc.exe. In the empty console, click File, and then click Add/Remove Snap-in.
      
      
   2. In the Add or Remove Snap-ins dialog box, select Certificates from the list of Available snap-ins, and then click Add.
      
      
   3. In the Certificate snap-in dialog box, select Computer account, and then click Next.
      
      
   4. In the Select Computer dialog box, ensure that Local computer: (the computer this console is running on) is selected, and then click Finish.
      
      
   5. In the Add or Remove Snap-ins dialog box, click OK.
      
      
   6. In the console, expand Certificates (Local Computer), expand Trusted People, and select Certificates.
      
      
   7. Right-click the certificate with the friendly name of <FQDN of site server>, click All Tasks, and then select Export.
      
      
   8. Complete the Certificate Export Wizard by using the default options and save the certificate with the .cer file name extension.
      
      

2. Perform the following steps on the computer that runs the Configuration Manager console to add the self-signed certificate to the Trusted People certificate store:

   1. Repeat the preceding steps 1.a through 1.e to configure the Certificate snap-in MMC on the management point computer.
      
      
   2. In the console, expand Certificates (Local Computer), expand Trusted People, right-click Certificates, select All Tasks, and then select Import to start the Certificate Import Wizard.
      
      
   3. On the File to Import page, select the certificate saved in step 1.h, and then click Next.
      
      
   4. On the Certificate Store page, select Place all certificates in the following store, with the Certificate store set to Trusted People, and then click Next.
      
      
   5. Click Finish to close the wizard and complete the certificate configuration on the computer.
      
      

1. In the Configuration Manager console, click Administration.

2. In the Administration workspace, expand Site Configuration, and then click Servers and Site System Roles to list the site systems.

   Tip
   To list only site systems that host the reporting services point site role, right-click Servers and Site System Roles to select Reporting services point.

3. Select the site system that hosts the reporting services point on which you want to modify settings, and then select Reporting service point in Site System Roles.

4. On the Site Role tab, in the Properties group, click Properties.

5. On the Reporting Services Point Properties dialog box, you can modify the following settings:

   • Site database server name: Specify the name of the server that hosts the Configuration Manager site database. Typically, the wizard automatically retrieves the fully qualified domain name (FQDN) for the server. To specify a database instance, use the format <Server Name>\<Instance Name>.
     
     
   • Database name: Specify the System Center 2012 Configuration Manager site database name, and then click Verify to confirm that the wizard has access to the site database.
     
     

     Security Note
     The user account that is creating the reporting services point must have Read access to the site database. If the connection test fails, a red warning icon appears. Move the cursor over this icon to read details of the failure. Correct the failure, and then click Test again.

   • User account: Click Set, and then select an account that is used when SQL Server Reporting Services on the reporting services point connects to the Configuration Manager site database to retrieve the data that are displayed in a report. Select Existing account to specify a Windows user account that has existing Configuration Manager rights or select New account to specify a Windows user account that currently does not have rights in Configuration Manager. Configuration Manager automatically grants the specified user account access to the site database. The account is displayed as the ConfigMgr SRS reporting point account in the Accounts subfolder of the Security node in the Administration workspace.
     
     The specified Windows user account and password are encrypted and stored in the Reporting Services database. Reporting Services retrieves the data for reports from the site database by using this account and password.
     
     

     Security Note
     When the site database is on a remote site system, the account that you specify must have the Log on Locally permission for the computer.

6. Click OK to save the changes and exit the dialog box.

1. In the Configuration Manager console, click Monitoring.

2. In the Monitoring workspace, expand Reporting, and then click Reports.

3. On the Home tab, in the Settings group, click Report Options.

4. Select the default report server in the list, and then click OK. If no reporting services points are listed in the list, verify that you have a reporting services point successfully installed and configured in the site.