Log KMA Back into Cluster
This OKM console function logs the KMA back into the cluster after its passphrase has been changed. The KMA must be known to the cluster. It cannot be a new KMA.
Available to: Security Officer (requires
quorum)
- If the KMA has been logged out of the cluster for at least a few hours, then lock the KMA before logging the KMA back into the cluster (see Lock/Unlock the KMA). After recent updates have been propagated to this KMA, as shown by the Replication Lag Size in the KMA List panel, unlock the KMA.
- Choose a time of light operations to log the KMA back into the cluster. After logging the KMA in, it will take time for the existing cluster information to be replicated to the KMA, which can cause the cluster to become busy.
- Log into OKM console. At the
Please enter your choice:
prompt on the main menu, selectLog KMA Back into Cluster
and press Enter. - At the prompt, type the IP address or host name of another KMA in the cluster and press Enter.
- At the prompt for a passphrase, type the passphrase of the KMA and press Enter.
- Enter the a quorum of key split user names and passphrases to complete the change.
- To end the key split user authorization, leave the user name blank and press Enter.
- When prompted, type y and press Enter.