High Availability Key Management Center; Choosing High Availability Settings - Cisco AJ732A - MDS 9134 Fabric Switch Configuration Manual

Chapter 6 Cisco SME Key Management
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
The default setting is Yes. Setting this option to No is required only if tape cloning is done outside of the
Cisco SME tape group.

High Availability Key Management Center

The Cisco KMC server consists of a pair of KMC servers (KMS) that provides high availability and
reliability. These high availability servers helps to avoid both downtime and loss of data through
synchronization and redundancy. The KMS consists of a primary and a secondary KMC server which
point to the same database.
Both the KMS should use the same Oracle 11g Enterprise installation to achieve high availability. The
Oracle 11g Enterprise installation should be installed on the two servers and synchronized using Oracle
Active Data guard.
Each Cisco SME cluster is configured with primary and secondary KMC servers. The primary server is
preferred over the secondary server.
The cluster is connected to the primary server and, at any indication of failure, connects to the secondary
server. The cluster periodically checks for the availability of the primary server and resumes connection
to the primary server when it becomes available.
All the switches in a cluster use the same KMC server. When a switch connects to a secondary server,
an automatic cluster-wide failover occurs to the secondary server. The switches in the cluster fails over
to the primary server once it is available.
Note Configure the primary and secondary servers during the cluster creation or update the Key Manager
Settings for a created cluster.

Choosing High Availability Settings

To choose the primary or secondary server, follow these steps:
Step 1 Go to the Fabric Manager Web Client and choose Key Manager Settings.
Step 2 In the High Availability Settings area, click Edit HA Settings.
Step 3 Choose the server to be the primary server and specify the IP address of the secondary server.
Alternately, you can choose the server to be the secondary server and specify the IP address of the
primary server.
OL-18091-01, Cisco MDS NX-OS Release 4.x
Cisco MDS 9000 Family Storage Media Encryption Configuration Guide
High Availability Key Management Center
6-5