Symantec Veritas 5 User Manual
Page 32

Table 3-1
Preparatory tasks to configure a cluster in secure mode
Who performs
this task
Tasks
VCS administrator
Decide one of the following configuration modes to set up a cluster in
secure mode:
■
Automatic mode
■
Semi-automatic mode
■
Manual mode
AT administrator
Install the root broker on a stable system in the enterprise.
See
“Installing the root broker for the security infrastructure”
on page 33.
AT administrator
On the root broker system, create authentication broker accounts for
each node in the cluster.
See
“Creating authentication broker accounts on root broker system”
on page 34.
AT administrator requires the following information from the VCS
administrator:
■
Node names that are designated to serve as authentication brokers
■
Password for each authentication broker
AT administrator
To use the semi-automatic mode, create the encrypted files (BLOB
files) for each node and provide the files to the VCS administrator.
See
“Creating encrypted files for the security infrastructure”
on page 35.
AT administrator requires the following additional information from
the VCS administrator:
■
Administrator password for each authentication broker
Typically, the password is the same for all nodes.
AT administrator
To use the manual mode, provide the root_hash file
(/opt/VRTSat/bin/root_hash) from the root broker system to the VCS
administrator.
VCS administrator
Copy the files that are required to configure a cluster in secure mode
to the system from where you plan to install and configure VCS.
See
“Preparing the installation system for the security infrastructure”
on page 37.
Preparing to install VCS
Preparing to configure the clusters in secure mode
32