Upon receipt of an availability requirement of a computer system under management, a redundant configuration management system determines placement of processing programs in physical servers equipped in the computer system to satisfy the availability requirement with reference to system configuration information indicative of the configuration of the computer system and restriction information for limiting the number of processing programs which can be run by the physical servers.