Symantec 5 Creating encrypted files for the security infrastructure, Venus # vssat showbrokerhash

Preparing to install VCS 35

Preparing to configure the clusters in secure mode

■If the output displays the following error, then the account for the given authentication broker is not created on this root broker:

"Failed To Get Attributes For Principal"

Proceed to step 3.

3Create a principal account for each authentication broker in the cluster. For example:

venus> # vssat addprpl --pdrtype root --domain \ root@venus.symantecexample.com --prplname galaxy \ --password password --prpltype service

You must use this password that you create in the input file for the encrypted file.

Creating encrypted files for the security infrastructure

Create encrypted files (BLOB files) only if you plan to choose the semiautomatic mode that uses an encrypted file to configure the Authentication Service. The administrator must create the encrypted files on the root broker node. The administrator must create encrypted files for each node that is going to be a part of the cluster before you configure the Authentication Service for VCS.

To create encrypted files

1Make a note of the following root broker information. This information is required for the input file for the encrypted file:

hash	The value of the root hash string, which consists of 40
	characters. Execute the following command to find
	this value:
	venus> # vssat showbrokerhash
root_domain	The value for the domain name of the root broker
	system. Execute the following command to find this
	value:
	venus> # vssat showalltrustedcreds

2Make a note of the following authentication broker information for each node. This information is required for the input file for the encrypted file: