Activate RSS Encryption?
David Grove (IDS 12.10.FC12, Solaris) asked for the correct procedure and order to enable ENCRYPT_SMX between a primary and RSS, without breaking replication. He listed four possible orders. HCL support took over a week to respond; the technician later said he had missed the online case notes. No procedure was given in the thread.
Auto-generated by Claude from the posts below — may be imperfect; read the full thread.
IDS 12.10.FC12 Solaris 10 1/13 What is the specific procedure (sequence of events) to activate encryption between a primary and an RSS? I believe one need only set the ENCRYPT_SMX parameter. I think it needs to be set on both ends (but don't know for sure). I don't know if the order is important. Do the Primary first? Or, the RSS? Take both down first (before bringing either of the servers back up with ENCRYPT_SMX set), or doesn't it matter? I can't really tell from the documentation, and I don't want to botch replication and then have to re-initialize it. We opened a tech support case on 9/28, but, so far, we have no definitive answer. Might anyone know from experience? Thank you. Regards, DG
As I see it, there are 4 possibities: 1) Edit Primary ONCONFIG and bounce (while RSS remains up). 2) Edit RSS ONCONFIG and bounce (while Primary remains up). 3) Take both down and edit their ONCONFIGs, bring Primary back up, then RSS. 4) Take both down and edit their ONCONFIGs, bring RSS back up, then Primary. I just don't want to do anything to risk hatching the (currently active) replication process, and then have to restart from scratch. If anyone knows which is correct, or if it matters at all, I'd be interested in knowing. From what I can tell (and I may have just not found the relevant material), the documentation doesn't speak to it. For setting up HDR, it has a lovely step-by-step procedure of what needs to be done on primary, and what needs to be done on secondary, and the sequence of those operations. But, I can't find similar details for this procedure. I have opened a tech support case, but HCL continues to research the issue, with no target date for resolution. Thank you. DG
This is becoming frustrating. We opened a tech support case on 9/28, and HCL responded with a partial answer the same day. They said they had to research the issue to find the real answer. It is now Oct 8, and they have not responded any further. They have not responded to an additional post I made. They have not responded to a request to upgrade priority of the case. The chat button produces an "agent unavailable" 100% of the time. I do not know how to wake them up. Their service is less than satisfactory. DG
We heard from HCL, today. The tech apologized for the delay, and explained that he had not been alerted to my online entries in the case notes since 9/28. (He was responding to a personal email I sent outside of the online case management tool.) DG