OPTIONAL: HSM with xHA - BlueCat Integrity - 9.5.0

Address Manager Administration Guide

Product name
BlueCat Integrity

Customers can use xHA as part of their HSM environment to ensure redundancy of their DNS/DHCP Servers.

Important: Limitations
Currently, the following limitations exist with HSM and xHA:
  • You can't enable HSM on a preconfigured xHA pair.
  • Edit xHA and Repair xHA with HSM-enabled DNS/DHCP Servers isn't supported.
Configuring HSM with xHA requires the following:
  1. Enable HSM on standalone DNS/DHCP Servers. This joins each server to the HSM Security World.
  2. Create xHA.
If you need to edit or replace HSM-enabled nodes in an xHA pair, you must perform the following:
  1. Break xHA.
  2. Edit the individual DNS/DHCP Servers, or replace the servers as necessary.
  3. Enable HSM on the standalone DNS/DHCP Servers.
  4. Create xHA.
For complete information on xHA, refer to Crossover high availability (xHA).