Enabling and Disabling VERITAS Security Services

This section describes how to enable and disable VERITAS Security Services (VxSS). Do not edit the VCS configuration file main.cf to enable or disable VxSS.

  To enable VERITAS Security Services

1. Verify you have a VxSS root broker configured. See the VERITAS Cluster Server Installation Guide for instructions.
2. Run the installvcs command with the -security option.
   # installvcs -security

   The command prompts you to choose whether you want to enable or disable VxSS.

   
   1)  Enable VERITAS Security Services on a VCS Cluster
   2)  Disable VERITAS Security Services on a VCS Cluster
   3)  Install VERITAS Security Services Root Broker
    
   Select the Security option you would like to perform [1-3,q]
3. Enter 1 and press Return.

   The command retrieves information about VCS configuration files in the cluster and asks if you want to enable VERITAS Security Services in the cluster.

   
   Cluster Name: vxsstest
   Cluster ID Number: 233
   Systems: vcsqs3 vcsqs4
   Service Groups: groupA groupB
   
   Would you like to enable VERITAS Security Services on this cluster?
4. Enter y and press Return.
5. The command creates the VxSS service group, creates VxSS credentials on each node in the cluster, establishes trust with the root broker, and restarts the cluster in secure mode. It also creates Web credentials for VCS users. Various messages indicate the status of the process.
6. Press Return to complete the process.

  To disable VERITAS Security Services

1. Run the installvcs command with the -security option.
   # installvcs -security

   The command prompts you to choose whether you want to enable or disable VxSS.

   
   1)  Enable VERITAS Security Services on a VCS Cluster
   2)  Disable VERITAS Security Services on a VCS Cluster
   3)  Install VERITAS Security Services Root Broker
    
   Select the Security option you would like to perform [1-3,q]
2. Enter 2 and press Return.

   The command retrieves information about VCS configuration files in the cluster and asks if you want to disable VERITAS Security Services in the cluster.

   
   Cluster Name: vxsstest
   Cluster ID Number: 233
   Systems: vcsqs3 vcsqs4
   Service Groups: groupA groupB
   
   Would you like to disable VERITAS Security Services on this cluster?
3. Enter y to disable VERITAS Security Services and press Return.
4. The command deletes the VxSS service group, stops VCS, disables VERITAS Security Services, and restarts the cluster.
5. Press Return to complete the process.