CA EEM Getting Started › Configuring Failover › Application Data Store Failover › Configure the Application Data Store Failover

Configure the Application Data Store Failover

Note: Perform the steps in the following procedure on the primary server. Any steps to be performed on secondary servers are explicitly mentioned.

This procedure assumes that you have installed the CA EEM Server with the following default values:

• dsa user: dsa
• data dsa port: 509
• group membership: etrdir

If you customized any of these parameters to a custom value, replace the default values with the custom values.

To configure application data store failover

1. Stop the CA EEM services using the following commands on all the servers in the failover setup:
   • Windows

     net stop igateway
     dxserver stop all
     ssld stop
     

   • Linux and UNIX

     $IGW_LOC/S99igateway stop
     su - dsa -c "dxserver stop all"
     su - dsa -c "ssld stop"
     

2. Copy the following files from each of the secondary CA EEM Servers to the primary server, say Server1, to the respective folders:
   • Windows

     %DXHOME%\config\knowledge\iTechPoz-HostnameOfServerN.dxc
     %DXHOME%\config\knowledge\iTechPoz-HostnameOfServerN-Router.dxc
     %DXHOME%\config\ssld\personalities\iTechPoz-HostnameOfServerN.pem
     %DXHOME%\config\ssld\personalities\iTechPoz-HostnameOfServerN-Router.pem
     

   • Linux and UNIX

     $DXHOME/config/knowledge/iTechPoz-HostnameOfServerN.dxc
     $DXHOME/config/knowledge/iTechPoz-HostnameOfServerN-Router.dxc
     $DXHOME/config/ssld/personalities/iTechPoz-HostnameOfServerN.pem
     $DXHOME/config/ssld/personalities/iTechPoz-HostnameOfServerN-Router.pem
     

3. Copy the following file from the secondary servers to a temporary folder on the primary server Server1:
   • UNIX and Linux

     $DXHOME/config/ssld/iTechPoz-trusted.pem
     

   • Windows

     %DXHOME%\config\ssld\iTechPoz-trusted.pem
     

4. Edit the configuration files (iTechPoz-HostnameOfServerN.dxc) of all the servers on Server1 as follows:
   • Modify the following line:

     address      = tcp localhost port 509
     

     #address = tcp HostnameOfServerN port 509, tcp localhost port 509
     

     #dsa-flags	= multi-write
     

   • To read:

     #address      = tcp localhost port 509
     

     address = tcp HostnameOfServerN port 509, tcp localhost port 509
     

     dsa-flags	= multi-write
     

   Notes:

   • CA EEM uses port number 509 as the default data dsa port. If you have configured the CA EEM Server to use a custom data dsa port, replace 509 with the custom port number.
   • To use IP addresses instead of hostname, enclose the IP address in double quotes (" ").
5. Edit the iTechPoz.dxg of Server1 to include the secondary server references.

   Example:

   # iTechPoz - iTechnology Repozitory
   # Source the knowledge files of the iTechPozRouter and iTechPoz DSAs.
   source "iTechPoz-HostnameofServer1-Router.dxc";
   source "iTechPoz-HostnameofServer1.dxc";
   source "iTechPoz-HostnameOfServer2-Router.dxc";
   source "iTechPoz-HostnameOfServer2.dxc";
   source "iTechPoz-ServerN-Router.dxc";
   source "iTechPoz-ServerN.dxc";
   

6. Create a new iTechPoz-trusted.pem file by concatenating the contents of iTechPoz-trusted.pem of each of the secondary servers with Server1.
   • Windows

     type <absolute path to iTechPoz-trusted.pem of Server2> >> <absolute path to iTechPoz-trusted.pem of Server1>
     

   • UNIX or Linux

     cat <absolute path to iTechPoz-trusted.pem of Server2> >> <absolute path to iTechPoz-trusted.pem of Server1>
     

   Example: type "C:\Program Files\CA\Directory\dxserver\config\ssld\iTechPoz-trusted_2.pem" >> "C:\Program Files\CA\Directory\dxserver\config\ssld\iTechPoz-trusted.pem

7. Concatenate the content of iTechPoz-trusted.pem of each secondary server with the resultant iTechPoz-trusted.pem of the Server1.
8. Copy the following files from the primary server to the respective folders on all the secondary servers:

   Note: Back up the iTechPoz-trusted.pem and the data dsa and router files (iTechPoz*) of the secondary servers before performing the copying.

   • UNIX and Linux

     $DXHOME/config/ssld/iTechPoz-trusted.pem
     $DXHOME/config/ssld/personalities/iTechPoz-*.pem
     $DXHOME/config/knowledge/iTechPoz*
     

   • Windows

     %DXHOME%\config\ssld\iTechPoz-trusted.pem
     %DXHOME%\config\ssld\personalities\iTechPoz-*.pem
     %DXHOME%\config\knowledge\iTechPoz*
     

9. Edit the iTechPoz.dxg file on each of the secondary servers. The iTechPoz.dxg file must read:

   # iTechPoz - iTechnology Repozitory
   # Source the knowledge files of the iTechPozRouter and iTechPoz DSAs.
   source "iTechPoz-HostnameOfServerN-Router.dxc";
   source "iTechPoz-HostnameOfServerN.dxc";
   source "iTechPoz-HostnameOfServer1-Router.dxc";
   source "iTechPoz-HostnameOfServer1.dxc";
   source "iTechPoz-HostnameOfServer2-Router.dxc";
   source "iTechPoz-HostnameOfServer2.dxc";
   source "iTechPoz-ServerKRouter.dxc";
   source "iTechPoz-ServerK.dxc";
   

   Note: The entries for the localhost must appear before the entries for other servers.

10. Modify the ownership and group membership of the following files to dsa and etrdir respectively for all the CA EEM servers that are running on UNIX or Linux. Run the following commands:

    chown dsa:etrdir /opt/CA/Directory/dxserver/config/ssld/iTechPoz-trusted.pem
    chown dsa:etrdir /opt/CA/Directory/dxserver/config/knowledge/iTechPoz*
    

11. Start the CA EEM services using the following commands on all the servers:
    • Windows

      ssld start
      dxserver start all
      net start igateway
      

    • Linux and UNIX

      su - dsa -c "ssld start"
      su - dsa -c "dxserver start all"
      $IGW_LOC/S99igateway start
      

    The application data store failover configuration is saved.