Recovering From A Hardware Failure On An Access Gateway Machine; Reinstalling A Failed Access Gateway - Novell ACCESS MANAGER 3.1 SP2 - ACCESS GATEWAY GUIDE 2010 Manual

2 For the server certificate, click the Select Certificate icon, then select a different certificate,
such as the test-connector certificate.
3 Click OK to ignore the warnings that the certificate CN does not match the reverse proxy.
4 Click OK.
5 Click [Name of Reverse Proxy].
This must be the same reverse proxy that you selected in
6 For the server certificate, click the Select Certificate icon, select the certificate whose CN
matches the published DNS name of the parent proxy service, then click OK.
7 Click OK.
When you click OK, the correct certificate is added to the keystore.
8 Repeat Step 1 through
reverse proxies use the same certificate, continue with
9 On the Access Gateways page, click Update > OK.
The configuration changes are pushed to the Access Gateway, and the Access Gateway loads
and uses the new certificate.
7.4.3 Recovering from a Hardware Failure on an Access
Gateway Machine
If an Access Gateway machine experiences a hardware failure, such as a failed hard disk, you can
preserve its configuration and have it applied to the replacement machine. For information about this
procedure, see "Restoring an Access
Administration Console Guide.

7.4.4 Reinstalling a Failed Access Gateway

If the hardware of your Access Gateway fails and the Access Gateway is not a member of a cluster,
you might receive the following message when you reinstall it:
Start unsuccessful. Reason: Unable to read keystore: /opt/novell/devman/jcc/
certs/esp/signing.keystore.
If you receive this message, use the following process to solve the problem:
1 Add the failed Access Gateway to a cluster.
For instructions, see
Ignore the pending status of this command.
2 Reinstall the Access Gateway with a new IP address.
3 Add the new Access Gateway to the cluster and make it the primary cluster server.
4 Delete the failed Access Gateway from the cluster and from the Administration Console.
5 (Optional) If you want the Access Gateway to use the old IP address:
5a Reinstall the Access Gateway by using the old IP address.
5b Add it to the cluster.
Step 7 for each reverse proxy that uses a unique certificate. If all of the
Gateway" in the
Section 6.4.1, "Creating a New Cluster," on page
Step 1.
Step 9.
Novell Access Manager 3.1 SP2
196.
Troubleshooting the Access Gateway Appliance 219