SSL Manager clustering

When SSL Manager clustering is configured, the following configuration settings are propagated:

The IP address of the primary

Certificates - Certificate Authorities

Certificates - Add Root CA

Certificates - Restore Certificates

Decryption / Encryption: all settings

Validation: all settings

Client Certificates: all settings

Logging: all settings

Internal Root CA - Import Root CA

Internal Root CA - Create Root CA

Dynamically generated certificates and incidents

Configuring SSL Manager clustering:

1.	Configure and start Management Clustering. See Changing clustering configuration.

2.	On any node in the cluster, log on to Content Gateway Manager.

3.	Go to the Configure > My Proxy > Basic > Clustering tab.

4.	In the SSL Manager Configuration Server field, enter the IP address of the SSL Manager Configuration Server (the primary). (If the field is not editable, the system is not a member of a cluster.)

5.	Click Apply and restart Content Gateway. Note that all Content Gateway nodes are restarted. The restart identifies the primary to all cluster members and activates SSL clustering.

The configuration can be confirmed on the Monitor > My Proxy > Summary page, at the bottom of the Node Details section. If the SSL Manager Configuration Server IP address is a link, the server is another node in the cluster. Click the link to log onto the SSL Manager Configuration Server.