How do I configure failover for central computers? (NETIQKB2060)

goal
How do I configure failover for central computers?

goal
How do I configure central computer redundancy?

goal
How do I configure redundancy of the consolidator and DAS Services?

fact
Operations Manager 3.X

fact
Security Manager 3.X

fact
Security Manager 4.X

fact
Security Manager 5.X

fix

Security Manager version 5.5 provides both automatic failover management and user-configurable failover management.  Automatic central computer redundancy is a global setting enabled by default.

To manually specify central computers for failover:

1. If the central computers use different service accounts, ensure the service account used by each backup central computer is a member of the local Administrators group on all agents managed by the primary central computer.
2. Start the Monitor Console.
3. Disable automatic failover:
   
   1. In the left pane, expand Security Manager Monitor Console > Configuration > Global Settings.
   2. In the right pane, click Central Computers.
   3. On the Action menu, click Properties.
   4. Click Redundancy Policy.
   5. Clear System Controlled.
   6. Click OK.
      
4. In the left pane, expand Security Manager Monitor Console > Configuration > Central Computers.
5. In the right pane, select a central computer for which you want to specify failover computers.
6. On the Action menu, click Properties.
7. Click Redundant Central Computers.
8. In Available Central Computers, select a computer.
9. Click >>.
10. Repeat Steps 8 through 9 for each central computer that you want to designate as a failover computer.
11. Click Move Up and Move Down to arrange the computers in the order that you want failover to occur.

12. Click OK.

For more information, see the User Guide for Security Manager.

fix
Redundancy for Consolidator and DAS services, for Security Manager versions 3.10 through 5.1, is available by default whenever you install two or more central computers.  For deployed agents, the agent manager updates the list of consolidators automatically during a managed computer scan. For manually installed agents, run the manual agent setup again, update the configuration group, and add any redundant central computers to the list.

note

On version earlier than Security Manager 5.5, you can stop the agents moving from one Control Center to another by setting the interval of the managed computer scan to every zero days under Global Settings > Central Computers to disable the scan.

You can also set it to a high figure such as 999 days by modifying the configuration table in the OnePoint database:

DataCategory > AttributeCollectionSchedule DataName > Interval DataValue > value set in the global settings

Formerly known as NETIQKB2060