Architecture Of A Failover System - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

CS High Availability Overview
all requests to the machine that is still up and running until such time as the other machine is
brought back online. The cloning feature in CS also supports scalability by assigning the
same task to separate instances on different machines (e.g., handling certificate requests) in
a seemless way.
The following subsystems can be cloned and run on different hosts:
• Certificate Manager (CA) (see "Certificate Manager" on page 77)
• Data Recovery Manager (DRM) (see "Data Recovery Manager" on page 187)
• Online Certificate Status Manager (see "OCSP Responder" on page 157)

Architecture of a Failover System

The diagram in Figure 17-1 shows one way to set up a cloned CS system. In this system, a
separate OCSP Responder subsystem is handling certificate verification by taking
advantage of the CRL Publishing feature.
Figure 17-1
642 Red Hat Certificate System Administrator's Guide • September 2005
CS Setup Example