10.1 Configuring High Availability

To configure high availability, you must do the following:

  • Install and register the agents to the manager.

  • Define the domain.

  • (Conditional) Promote the backup manager when primary fails. To write configuration changes, you must first try to get the primary up again. If you are unable to get the primary up again, you can promote the backup manager.

To configure high availability:

  1. Install and register the PAM managers:

    1. Install a PAM manager.

      The first manager you install is defined as the primary manager by default, and its packages are defined as primary. Manager packages on all other manager hosts act as backups.

    2. Install another PAM manager.

      For more information about installing PAM managers, see Installing the Framework Manager in the Privileged Account Manager Installation Guide.

    3. Register the second PAM manager you installed to the PAM instance you installed first. After you register, the second PAM manager acts as a backup manager.

  2. To define the domain:

    1. Login to PAM administrator console.

    2. On the home page of the console, click Hosts > Add Domain.

    3. Specify a domain name.

    4. Click Add.

    5. To add managers and agents to the domain, drag and drop the managers and agents from the list to the domain.

      You can have multiple domains in PAM. If you have multiple domains, you can add a backup manager in every domain. So, any request from the agent can be processed by the manager in their domain.

  3. (Conditional) To promote a backup when the primary fails:

    1. Select a host from Hosts.

    2. Click Packages.

      The Status column indicates whether the status of a module is primary or backup.

    3. To promote a backup manager, select the required backup and click Promote Manager.