Recover a Server After it Loses Connection to the Key Manager
Prerequisites
Before rebooting your active directory servers, ensure that CipherTrust Manager connectivity is strong. If it is not strong, restore the CipherTrust Manager connectivity.
Note
When trying to fix a CipherTrust Manager connectivity issue, you can log in to DSRM mode. In DSRM mode, there is no requirement to increase the timeout, because in DSRM mode, the AD system does not shut down after timeout expires.
DSRM Mode
The first method for recovering a server relies on manual CipherTrust Manager connection troubleshooting:
-
Boot into DSRM mode.
-
Attempt to resolve why the server is not connecting to the CipherTrust Manager.
-
Fix that CipherTrust Manager connectivity issue.
-
Reboot into normal mode.