Installation and Upgrade Guides › SiteMinder Upgrade Guide › Upgrading from r6.x › How to Configure a Parallel Environment › Parallel Environment Key Management Options › Multiple Key Store Deployment

Multiple Key Store Deployment

Existing r6.x Policy Servers can use an r6.x key store for key rollover, while r12.0 SP2 Policy Servers can use an r12.0 SP2 key store for key rollover. The following figure illustrates:

• r6.x Policy Servers connecting to an r6.x policy store.
• r12.0 SP2 Policy Servers connecting to an r12.0 SP2 policy store.
• r6.x Policy Servers connecting to an r6.x key store to retrieve new keys.
• r12.0 SP2 Policy Servers connecting to an r12.0 SP2 key store to retrieve new keys.
• A SiteMinder administrator using the Administrative UI to configure static Agent and Session keys for each key store.

  Important! If all key stores do not use the same Agent and Session keys, single sign–on fails.

• r6.x Web Agents polling their respective r6.x Policy Servers to retrieve new keys.
• r12.0 SP2 Web Agents polling their respective r12.0 SP2 Policy Servers to retrieve new keys.

Note: Although not illustrated, policy store and key store data can be replicated for failover. The database or directory server type determines how you replicate data. For more information about key management in a master/slave environment, see the Policy Server Administration Guide. For more information about replicating data, see your vendor–specific documentation.