beautypg.com

Symantec Veritas 5 User Manual

Page 32

background image

Table 3-1

Preparatory tasks to configure a cluster in secure mode

Who performs
this task

Tasks

VCS administrator

Decide one of the following configuration modes to set up a cluster in
secure mode:

Automatic mode

Semi-automatic mode

Manual mode

AT administrator

Install the root broker on a stable system in the enterprise.

See

“Installing the root broker for the security infrastructure”

on page 33.

AT administrator

On the root broker system, create authentication broker accounts for
each node in the cluster.

See

“Creating authentication broker accounts on root broker system”

on page 34.

AT administrator requires the following information from the VCS
administrator:

Node names that are designated to serve as authentication brokers

Password for each authentication broker

AT administrator

To use the semi-automatic mode, create the encrypted files (BLOB
files) for each node and provide the files to the VCS administrator.

See

“Creating encrypted files for the security infrastructure”

on page 35.

AT administrator requires the following additional information from
the VCS administrator:

Administrator password for each authentication broker

Typically, the password is the same for all nodes.

AT administrator

To use the manual mode, provide the root_hash file
(/opt/VRTSat/bin/root_hash) from the root broker system to the VCS
administrator.

VCS administrator

Copy the files that are required to configure a cluster in secure mode
to the system from where you plan to install and configure VCS.

See

“Preparing the installation system for the security infrastructure”

on page 37.

Preparing to install VCS
Preparing to configure the clusters in secure mode

32