Setting an HA Group Member to Standby

Some HA group members can be designated as standby members. Standby members do not perform any cryptographic operations unless all active members have failed (see Standby Members for details). They are useful as a last resort against loss of application service.

Prerequisites

The partition you want to designate as a standby member must already be a member of the HA group (see Adding/Removing an HA Group Member). The Crypto Officer must perform this procedure.

To set an HA group member to standby

1.[Optional] Check the serial number of the member you wish to set to standby mode (see hagroup listgroups).

lunacm:> hagroup listgroups

lunacm:> hagroup listgroups

        If you would like to see synchronization data for group myHAgroup,

        please enter the password for the group members. Sync info

        not available in HA Only mode.

        Enter the password: ********

              HA auto recovery:  disabled

              HA recovery mode:  activeBasic

   Maximum auto recovery retry:  0

   Auto recovery poll interval:  60 seconds

                    HA logging:  disabled

            Only Show HA Slots:  no

                HA Group Label:  myHAgroup

               HA Group Number:  11238700701509

              HA Group Slot ID:  5

               Synchronization:  enabled

                 Group Members:  154438865287, 1238700701509

                    Needs sync:  no

               Standby Members:  <none>

Slot #    Member S/N                      Member Label    Status

======    ==========                      ============    ======

     0  154438865287                              par0     alive

     1  1238700701509                             par1     alive

     2  2855496365544                             par2     alive

Command Result : No Error

2.Set the desired member to standby mode by specifying the serial number (see hagroup addstandby).

lunacm:> hagroup addstandby -group <label> -serialnumber <member_serialnum>

lunacm:> hagroup addstandby -group myHAgroup -serialnumber 2855496365544

        The member 2855496365544 was successfully added to the standby list for the HA Group myHAgroup.

Command Result : No Error

To remove an HA group member from standby

1.[Optional] Check the serial number of the standby member (see hagroup listgroups).

lunacm:> hagroup listgroups

lunacm:> hagroup listgroups

        If you would like to see synchronization data for group myHAgroup,

        please enter the password for the group members. Sync info

        not available in HA Only mode.

        Enter the password: ********

              HA auto recovery:  disabled

              HA recovery mode:  activeBasic

   Maximum auto recovery retry:  0

   Auto recovery poll interval:  60 seconds

                    HA logging:  disabled

            Only Show HA Slots:  no

                HA Group Label:  myHAgroup

               HA Group Number:  11238700701509

              HA Group Slot ID:  5

               Synchronization:  enabled

                 Group Members:  154438865287, 1238700701509

                    Needs sync:  no

              Standby Members:  2855496365544

Slot #    Member S/N                      Member Label    Status

======    ==========                      ============    ======

     0  154438865287                              par0     alive

     1  1238700701509                             par1     alive

     2  2855496365544                             par2     alive

2.Remove the member from standby and return it to active HA use (see hagroup removestandby).

lunacm:> hagroup removestandby -group <label> -serialnumber <member_serialnum>

lunacm:> hagroup removestandby -group myHAgroup -serialnumber 2855496365544

        The member 2855496365544 was successfully removed from the standby list for the HA Group myHAgroup.

Command Result : No Error