Previous Topic: How to Install a Disaster Recovery DeploymentNext Topic: Set up the Disaster Recovery CA ControlMinder Enterprise Management


Set Up the Production CA ControlMinder Enterprise Management

The production Enterprise Management Server contains the DMS. The DMS stores up-to-date information about policy versions, policy scripts, and the policy deployment status of each endpoint. You use the production DMS to deploy and manage your enterprise policies.

Because the production DHs and the disaster recovery DMS subscribe to the production DMS, set up the production DMS before you set up any other disaster recovery component. This helps ensure that the subscriptions are correctly configured later in the installation process.

To set up the production Enterprise Management Server

  1. Implement the Enterprise Management Server.

    All the web-based applications, the Distribution Server, the DMS, and CA Access Control are installed.

  2. (Optional) Implement the Distribution Server.

    The Message Queue and the Java Connector Server are installed.

  3. (Optional) If you want to remove the local DH from the Enterprise Management Server and use the DH on the Distribution Server, to maintain a separation between the management and distribution server, run the following command on the production Enterprise Management Server:
    dmsmgr -remove -dh name 
    
    -dh name

    Removes a DH with the name specified on the local host.

    Example: dmsmgr -remove -dh DH

    The above example removed a DH named DH from the host.

    The production DMS is created with no subscribers.

  4. Configure the Message Queue to work in failsafe mode. Do the following:
    1. Navigate to the following directory, where ACServerInstallDir is the directory where you installed the Enterprise Management Server:
      ACServerInstallDir/MessageQueue/tibco/cfgmgmt/ems/data
      
    2. Open the queues.conf file for editing.
    3. Add the word "failsafe" at the end of every queue definition line, then save and close the file.
  5. Configure CA ControlMinder Enterprise Management with local DMS.

    You have installed and configured the production Enterprise Management Server. You can now configure the disaster recovery Enterprise Management Server.

Example: Edit the queues.conf File

The following snippet from the queues.conf file is an example of how you amend the file to configure the Message Queue to use the shared storage.

queue/snapshots secure,store=$sys.failsafe
queue/audit secure,store=$sys.failsafe
ac_endpoint_to_server secure,store=$sys.failsafe
ac_server_to_endpoint secure,store=$sys.failsafe