About Preserving Certificates And Issue Time; Install A Primary Server And Secondary Server In Each Server Group - Symantec 10551441 - AntiVirus Corporate Edition Reference Manual

52 How certificates are implemented
Other certificate details

About preserving certificates and issue time

Install a primary server and secondary server in each server group

Login certificates are short-lived and are not normally preserved on
management servers like server and login CA certificates are. Furthermore,
certificate names do not indicate the date and time that they are issued. To
preserve all certificates and include the date and time that they are issued in the
name, set the following registry key DWORD value to a value other than 0:
HKLM\Software\LANDesk\VirusProtect6\CurrentVersion\ArchiveCerts
When you set the registry key DWORD value to non-0 on a management server,
issued-YYMMDDHHMMSSMMMM-<certtype>.cer certificate files are written to
the \Program Files\SAV directory every time that a new certificate is issued. The
YYMMDDHHMMSSMMMM is a hex output of 2-digit year, 2-digit month, 2-digit
day, 2-digit 24 hour, 2-digit minute, 2-digit seconds, and 4-digit milliseconds.
A best practice for implementing server groups is to always have a primary
server and secondary server in each group. When a server group contains two or
more antivirus servers, every server other than the primary antivirus server is
defined as a secondary server. Symantec AntiVirus servers do not require server
operating systems, and do not support email scanning.
If your server group contains only one antivirus server, which would be the
primary server, and if that server crashes, you will not be able to unlock and
manage that server group from the Symantec System Center, and your
certificate infrastructure will become obsolete until you restore a backup. If you
have a secondary antivirus server in the group, you will be able to unlock that
server group, promote the secondary server to a primary server, move the
clients to the new primary server by copying the Grc.dat file from the primary
server to the clients, and reestablish communications with your managed
clients.
For additional information about the Grc.dat file and client communications,
refer to the Symantec AntiVirus Installation Guide in the client installation
chapter.