Installation and Upgrade Guides › SiteMinder Upgrade Guide › Upgrading from r12.x › How to Configure a Parallel Environment › Parallel Environment Key Management Options › Common Key Store Deployment

Common Key Store Deployment

All Policy Servers can use a single key store for key rollover. The following figure illustrates:

• r12.x Policy Servers connecting to an r12.x policy store.
• r12.0 SP2 Policy Servers connecting to an r12.0 SP2 policy store.
• A common r12.x key store maintaining key data for all Policy Servers. The common key store lets Agents associated with all Policy Server share keys. Sharing the keys enables single sign–on between both environments.

  Important! The r12.x key store must be configured separately from the r12.x policy store.

• All Policy Servers connecting to a common key store to retrieve new keys.

  Important! The r12.0 SP2 Policy Servers must be configured with the r12.x key store. r12.x Policy Servers cannot communicate with an r12.0 SP2 key store.

• All Web Agents polling their respective Policy Server to retrieve new keys.

Note: Although not illustrated, policy store and key store data can be replicated for failover. The database or directory server type determines how you replicate data. For more information about key management in a master/slave environment, see the Policy Server Administration Guide. For more information about replicating data, see your vendor–specific documentation.