Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 695 / 874

Cloning the Data Recovery Manager
Chapter 16 Configuring CMS for High Availability 695
kra-cert.db
kra-key.db (if present)
kra-mn.conf
III.
On the host machine of the clone, go to this directory:
<server_root>/cert-<cloneID>/config/
IV.
Copy the configuration files from the master Data Recovery Manager
to the clone.
❍
If the master Data Recovery Manager’s storage keys and certificates are
stored in the hardware token, you do not need to copy the kra-key.db files.
6.
Open the Server Group item, select the cloned DRM, and click Open again to
resume configuration where you left off in the installation wizard.
7.
Designate the password for the internal token in the Logon Token dialog.
8.
In the Master Database dialog, enter the hostname, port, and password for the
Master Database of the CMS system.
9.
In the Local Consumer Database dialog, specify what type of database you are
creating.
a.
Either select Create a local consumer database to create a new clone
database local to the cloned Data Recovery Manager.
b.
Or select Connect to the existing remote LDAP server to use the existing
LDAP server as the internal database for the cloned Data Recovery
Manager instance.
If you select the remote database, make sure that you have already created
an LDAP server containing a base suffix of o=netscapeCertificateServer on
the host whose host name and port number you specify in the fields in the
lower portion of the Installation Wizard.
10.
Configure replication between the cloned DRM database and the master DRM
database.
Follow the instructions on screen to create the password for the Replication
Manager role in the Master database, the password for the Replication
Manager role in the Consumer database, and the agreement names between
the master and clone’s databases. See Configuring Key Archival and Recovery
Process for more information.
11.
In the following dialog, enter the key and request number ranges for the cloned
Data Recovery Manager.