Replacing keys on a coordination point (CP server) when the Veritas Cluster Server (VCS) cluster is online involves refreshing that coordination point's registrations. You can perform a planned refresh of registrations on a CP server without incurring application downtime on the VCS cluster. You must refresh registrations on a CP server if the CP server agent issues an alert on the loss of such registrations on the CP server database.
The following procedure describes how to refresh the coordination point registrations.
To refresh the registration keys on the coordination points for server-based fencing
# cpsadm -s cp_server -a list_nodes
# cpsadm -s cp_server -a list_users
If the VCS cluster nodes are not present here, prepare the new CP server(s) for use by the VCS cluster.
See the Veritas Cluster Server Installation Guide for instructions.
If the /etc/vxfenmode.test file exists, ensure that the information in it and the /etc/vxfenmode file are the same. Otherwise, vxfenswap utility uses information listed in /etc/vxfenmode.test file.
For example, enter the following command:
# vxfenadm -d
================================ Fencing Protocol Version: 201 Fencing Mode: CUSTOMIZED Cluster Members: * 0 (galaxy) 1 (nebula) RFSM State Information: node 0 in state 8 (running) node 1 in state 8 (running)
# vxfenconfig -l
/etc/vxfenmodefile to the
This ensures that the configuration details of both the files are the same.
The vxfenswap utility requires a secure ssh connection to all the cluster nodes. Use -n to use rsh instead of default ssh.
# vxfenswap [-n]
The command returns:
VERITAS vxfenswap version <version> <platform> The logfile generated for vxfenswap is /var/VRTSvcs/log/vxfen/vxfenswap.log. 19156 Please Wait... VXFEN vxfenconfig NOTICE Driver will use customized fencing - mechanism cps Validation of coordination points change has succeeded on all nodes. You may commit the changes now. WARNING: This may cause the whole cluster to panic if a node leaves membership before the change is complete.
The command returns a confirmation of successful coordination point replacement.
Note that a running online coordination point refreshment operation can be canceled at any time using the command:
# vxfenswap -a cancel