Preparing The Installation System For The Security Infrastructure - Symantec Veritas Cluster Server Installation Manual

Preparing the installation system for the security infrastructure

Note that for security purposes, the command to create the output file for
the encrypted file deletes the input file.
5
For each node in the cluster, create the output file for the encrypted file from
the root broker system using the following command.
RootBroker> # vssat createpkg \
--in /path/to/blob/input/file.txt \
--out /path/to/encrypted/blob/file.txt \
--host_ctx AB-hostname
For example:
venus> # vssat createpkg --in /tmp/galaxy.blob.in \
--out /tmp/galaxy.blob.out --host_ctx galaxy
Note that this command creates an encrypted file even if you provide wrong
password for "password=" entry. But such an encrypted file with wrong
password fails to install on authentication broker node.
6
After you complete creating the output files for the encrypted file, you must
copy these files to the installer node.
The VCS administrator must gather the required information and prepare the
installation system to configure a cluster in secure mode.
To prepare the installation system for the security infrastructure
Depending on the configuration mode you decided to use, do one of the
following:
Automatic mode
Semi-automatic
mode
Preparing to configure the clusters in secure mode
Do the following:
Gather the root broker system name from the AT
administrator.
During VCS configuration, choose the configuration option
1 when the installvcs program prompts.
Do the following:
Copy the encrypted files (BLOB files) to the system from where
you plan to install VCS.
Note the path of these files that you copied to the installation
system.
During VCS configuration, choose the configuration option
2 when the installvcs program prompts.
Preparing to install VCS 37