Configuring the cluster in secure mode


		< Previous \| TOC \| Index \| Next >

Configuring the cluster in secure mode

Before you configure a cluster in a secure mode, make sure you have installed a root broker on another stable system. Also, make sure you meet the requirements for automatic or semiautomatic mode of configuration.

See Symantec Product Authentication Service.

To configure the cluster in secure mode

Choose whether to configure Storage Foundation to use Symantec Product Authentication Service.
- If you want to configure Authentication Service, make sure that you have installed the root broker, and answer y.
- If you decline to configure Authentication Service, answer n and proceed to adding Storage Foundation users.
  See Adding Storage Foundation users
  
  Would you like to configure VCS to use Symantec Security Services? [y,n,q] (n) y

Select one of the options to configure security.

Select the Security option you would like to perform [1-3,q,?]

Based on the mode of configuration you want to use, enter one of the following:

Option

Tasks

1. Automatic configuration

Enter the name of the root broker system when prompted.

Requires remote access to the root broker.

Review the output as the installer verifies communication with the root broker system, checks vxatd process and version, and checks security domain.

2 . Semi-automatic using encrypted files

Enter the path of the file for each node when prompted.

3. Semi-automatic entering authentication information at installer prompts

Enter the following root broker information as the installer prompts you:

Enter root Broker name: venus.symantecexample.com

Enter root broker FQDN: [b] (symantecexample.com) symantecexample.com

Enter root broker domain: [b] (root@venus.symantecexample.com) root@venus.symantecexample.com

Enter root broker port: [b] (2821) 2821

Enter path to the locally accessible root hash [b] (/var/tmp/installvcs-1Lcljr/root_hash)
/root/root_hash

Enter the following authentication broker information as the installer prompts you for each node:

Enter authentication broker principal name on galaxy [b] (galaxy.symantecexample.com)

galaxy.symantecexample.com

Enter authentication broker password on galaxy:

Enter authentication broker principal name on nebula [b] (nebula.symantecexample.com)

nebula.symantecexample.com

Enter authentication broker password on nebula:

After configuring the cluster in secure mode, proceed to configure the Cluster Management Console cluster connector.
See Configuring cluster connector.


^ Return to Top	< Previous \| TOC \| Index \| Next >

Option	Tasks
`1`. Automatic configuration	Enter the name of the root broker system when prompted. Requires remote access to the root broker. Review the output as the installer verifies communication with the root broker system, checks vxatd process and version, and checks security domain.
`2` . Semi-automatic using encrypted files	Enter the path of the file for each node when prompted.
`3`. Semi-automatic entering authentication information at installer prompts	Enter the following root broker information as the installer prompts you: Enter root Broker name: `venus.symantecexample.com` Enter root broker FQDN: [b] (symantecexample.com) `symantecexample.com` Enter root broker domain: [b] (root@venus.symantecexample.com) `root@venus.symantecexample.com` Enter root broker port: [b] (2821) `2821` Enter path to the locally accessible root hash [b] (/var/tmp/installvcs-1Lcljr/root_hash) `/root/root_hash` Enter the following authentication broker information as the installer prompts you for each node: Enter authentication broker principal name on galaxy [b] (galaxy.symantecexample.com) `galaxy.symantecexample.com` Enter authentication broker password on galaxy: Enter authentication broker principal name on nebula [b] (nebula.symantecexample.com) `nebula.symantecexample.com` Enter authentication broker password on nebula: