To enable secure mode in a VCS cluster

1. # hasys -state

   The output must show the SysState value as RUNNING.
2. You can enable secure mode or secure mode with FIPS.

   To enable secure mode, start the installer program with the -security option.

   # /opt/VRTS/install/installer -security

   To enable secure mode with FIPS, start the installer program with the -security -fips option.

   # /opt/VRTS/install/installvcs -security -fips

   If you already have secure mode enabled and need to move to secure mode with FIPS, complete the steps in the following procedure.

   See Migrating from secure mode to secure mode with FIPS.

   The installer displays the directory where the logs are created.

3. Review the output as the installer verifies whether VCS configuration files exist.

   The installer also verifies that VCS is running on all systems in the cluster.

4. The installer checks whether the cluster is in secure mode or non-secure mode. If the cluster is in non-secure mode, the installer prompts whether you want to enable secure mode.

   Do you want to enable secure mode in this cluster? [y,n,q] (y) y

5. Review the output as the installer modifies the VCS configuration files to enable secure mode in the cluster, and restarts VCS.

To disable secure mode in a VCS cluster

1. Start the installer program with the -security option.

   # /opt/VRTS/install/installer -security

   To disable secure mode with FIPS, use the follwing command:

   # /opt/VRTS/install/installvcs -security -fips

   The installer displays the directory where the logs are created.

2. Review the output as the installer proceeds with a verification.
3. The installer checks whether the cluster is in secure mode or non-secure mode. If the cluster is in secure mode, the installer prompts whether you want to disable secure mode.

   Do you want to disable secure mode in this cluster? [y,n,q] (y) y

4. Review the output as the installer modifies the VCS configuration files to disable secure mode in the cluster, and restarts VCS.