Symantec Privileged Access Management

Expand all | Collapse all

simple way for double controlminder entm server, not high availability

  • 1.  simple way for double controlminder entm server, not high availability

    Posted Oct 02, 2015 10:14 PM

    I already have one enterprise management server with oracle, not rac, that is installed on the linux.

    I'd like to install another enterprise management server to replace a failulre of one manually.

     

    is it possobile or correct procedure ?

     

    - ENTM Server (not shared DMS/DH and MessageQueue)

    1) Stop all CA ControlMinder Services and JBOSS on the primary entm server

    2) Install the secondary entm server

    - installation type: Primary Enterprise Management Server

    - dbms: oracle used in the primary entm server

    3) Configure VIP (Virtual IP) on active entm server

     

    - Endpoints

    4) configure endpoints to connect to the entm server through the vip.



  • 2.  Re: simple way for double controlminder entm server, not high availability
    Best Answer

    Posted Oct 05, 2015 03:50 AM

    Hi,

     

    To install Enterprise Management Server to failover manually.

     

    1) Stop all CA ControlMinder Services and JBOSS on the primary entm server

    2) Install the secondary entm server,

         installation type: Primary Enterprise Management Server

         dbms: oracle used in the primary entm server

         Encryption Key (FIPS) : The one exists on the Primary Enterprise Management Server

         Passwords : Use the same passwords as did on the  Primary Enterprise Management Server


    3) Configure DH__ in all endpoints with Primary Enterprise Management Server  and Secondary Enterprise Management Server

    (Upon the stopping the services in primary, endpoints will start communicating to secondary DH__)


    Now, the problem is how to move the DMS__ , DH__ ,DH__WRITER and tibco data to the secondary Enterprise Management Server and keep the data in sync upon manual failover.


    To do this:


    -- Move the tibco data files manually and export the DMS__ , DH__ and DH__WRITER to clear text files  and import back on the secondary.


    But a better way to do this would be having a shared storage between these two servers and do a fail over manually.



    Thank You

     

    --

    Vinay Reddy