Preparing to install VCS 37

Preparing to configure the clusters in secure mode

Note that for security purposes, the command to create the output file for the encrypted file deletes the input file.

5For each node in the cluster, create the output file for the encrypted file from the root broker system using the following command.

RootBroker> # vssat createpkg \

--in /path/to/blob/input/file.txt \

--out /path/to/encrypted/blob/file.txt \ --host_ctxAB-hostname

For example:

venus> # vssat createpkg --in /tmp/galaxy.blob.in \ --out /tmp/galaxy.blob.out --host_ctx galaxy

Note that this command creates an encrypted file even if you provide wrong password for "password=" entry. But such an encrypted file with wrong password fails to install on authentication broker node.

6After you complete creating the output files for the encrypted file, you must copy these files to the installer node.

Preparing the installation system for the security infrastructure

The VCS administrator must gather the required information and prepare the installation system to configure a cluster in secure mode.

To prepare the installation system for the security infrastructure

Depending on the configuration mode you decided to use, do one of the following:

Automatic mode

Do the following:

 

Gather the root broker system name from the AT

 

administrator.

 

During VCS configuration, choose the configuration option

 

1 when the installvcs program prompts.

Semi-automatic

Do the following:

mode

Copy the encrypted files (BLOB files) to the system from where

 

 

you plan to install VCS.

 

Note the path of these files that you copied to the installation

 

system.

 

During VCS configuration, choose the configuration option

 

2 when the installvcs program prompts.

Page 37
Image 37
Symantec 5 manual For example, RootBroker # vssat createpkg