Removing a master from Multi-Master cluster

You can remove a master, which is no longer required in the IBM Security Key Lifecycle Manager Multi-Master cluster.

Before you begin

Before you delete master details of the cluster, review the considerations and restrictions that are listed in the Requirements and considerations for multi-master configuration topic.

About this task

You cannot delete a primary master of the cluster. You can delete a standby master only when the cluster contains multiple standbys. IBM Security Key Lifecycle Manager Multi-Master cluster supports up to three standbys.

Use the IBM Security Key Lifecycle Manager Multi-Master page or Remove Master REST Service to delete a master.

Your role must have a permission to delete a master of the cluster.

Procedure

  1. Go to the appropriate page or directory.
    Graphical user interface
    1. Log on to the graphical user interface.
    2. On the Welcome page, click Administration > Multi-Master.
    REST interface
    Open a REST client.
  2. Delete the master details.
    Graphical user interface
    1. From the Masters table, select the master that you want to delete.
    2. Click Delete Master.
    3. On the Confirm dialog, read the confirmation message before you delete the master.
    4. Click OK.
    REST interface
    1. Obtain a unique user authentication identifier to access IBM Security Key Lifecycle Manager REST services. For more information about the authentication process, see Authentication process for REST services.
    2. To run Remove Master REST Service, send the HTTP POST request. Pass the user authentication identifier that you obtained in Step a along with the request message as shown in the following example.
      POST https://localhost:<port>/SKLM/rest/v1/ckms/config/nodes/removeNode
Content-Type: application/json
Accept: application/json
Authorization: SKLMAuth userAuthId=139aeh34567m
[
{"clusterName": "multimaster"},
{"type": "Node",
"ipHostname" : "cimkc2b151",
"httpPort" : "443",
"sklmUsername" : "sklmadmin",
"sklmPassword" : "SKLM@admin123",
"wasUsername" : "wasadmin",
"wasPassword" : "WAS@admin123"}
]
  3. Restart WebSphere® Application Server to refresh the configuration.

What to do next

Verify whether the master that you deleted is removed from the Masters table.