Modifying master details of a cluster

You can change the IBM Security Key Lifecycle Manager multi-master configuration, such as modifying master server details to meet your requirements. For example, you can update the IBM Security Key Lifecycle Manager administrator password.

Before you begin

Before you modify master details of the cluster, review the considerations and restrictions that are listed in the Requirements and considerations for multi-master configuration topic.

About this task

Use the Multi-Master Configuration - Modify Master dialog or Modify Master REST Service to modify master details.

Your role must have a permission to modify details of a master server in the IBM Security Key Lifecycle Manager multi-master cluster.

Before you add a master server to the cluster through the migrated system, you must modify the IBM Security Key Lifecycle Manager administrator user name and the password in the following situations:
  1. When users and groups are migrated from previous version to version 3.0.1 through cross-migration process.
  2. IBM Security Key Lifecycle Manager administrator user name and the password are different than that of the credentials specified during version 3.0.1 installation.

Procedure

  1. Go to the appropriate page or directory.
    Graphical user interface
    1. Log on to the graphical user interface.
    2. On the Welcome page, click Administration > Multi-Master > Masters.
    REST interface
    Open a REST client.
  2. Modify the master details.
    Graphical user interface
    1. From the Masters table, select the master that you want to modify.
    2. Click the Modify Master tab. Alternatively, double-click the selected master entry.
    3. On the Multi-Master Configuration - Modify Master dialog, modify the master details as necessary.
    4. Click Test Connection to test the communication between the master that you are modifying and the current primary server is successful. For more information, see Perform a test connection.
    5. Click Update.
    REST interface
    1. Obtain a unique user authentication identifier to access IBM Security Key Lifecycle Manager REST services. For more information about the authentication process, see Authentication process for REST services.
    2. To run Modify Master REST Service, send the HTTP POST request. Pass the user authentication identifier that you obtained in Step a along with the request message as shown in the following example.
      POST https://localhost:<port>/SKLM/rest/v1/ckms/config/nodes/updateMaster
      Content-Type: application/json
      Accept: application/json
      Authorization: SKLMAuth userAuthId=139aeh34567m
      {
      "type" : "Standby",
      "ipHostname": "cimkc2b151",
      "httpPort": "443",
      "sklmUsername": "sklmadmin",
      "sklmPassword": "SKLM@admin123",
      "wasUsername": "wasadmin",
      "wasPassword": "WAS@admin123",
      }
      ]

What to do next

Verify health status information of the master that you modified on the Masters table, and also on the IBM Security Key Lifecycle Manager welcome page.