Quantum Q-EKM User's Guide download pdf (Page 49)

Chapter 5 Q-EKM Server Operation and Configuration

Keeping the Keystores Matched

Quantum Encryption Key Manager Service and Installation Manual 36

8 Press <Enter>.

The synchronization setup completes and the first sync occurs. You

receive several lines of confirmation text:

* Verify primary to secondary server sync has been configured.

* Primary to secondary sync has been configured.

Syncing primary to secondary

---------------------------------------------

Sync completed

---------------------------------------------

Press <Enter> to return to the command menu.

Keeping the Keystores Matched

In order for failover to work, the primary and secondary keystores must

match. Unlike the configuration files, which are copied from the primary

to the secondary Q-EKM server automatically once you set up

synchronization, the keystore is not automatically copied from one server

to the other. You must manually ensure that the keystores match any time

you make changes to the keystore. Changes to the keystore include:

• Importing keys

• Importing certificates

There are two was to make sure the keystores match. Do one of the

following:

• Import the keys or certificates onto both Q-EKM servers (see

Chapter 6, Sharing Encrypted Tapes – Import/Export Operations

• Import the keys or certificates onto one Q-EKM server, and then copy

the keystore file from that server onto the other server. The keystore

file is called

EKMKeys.jck and is located in the QEKM directory of the

Q-EKM server:

Windows

c:\Program Files\Quantum\QEKM

Linux

/opt/Quantum/QEKM

1 2 ... 44 45 46 47 48 49 50 51 52 53 54 ... 92 93

No comments

Quantum Q-EKM User's Guide Page 49