When you install Cryptographic Security Platform Compliance Manager, the process creates a Cryptographic Security Platform Compliance Manager node that can be joined with other nodes to form an active-active cluster. These nodes can be installed in different geographic locations, but they must be able to communicate with each other.

All Cryptographic Security Platform Compliance Manager nodes in a cluster share configuration settings and policy information. Changes made on one node are automatically synced to all nodes in the cluster through an encrypted object store. This provides a failover mechanism in case a Cryptographic Security Platform Compliance Manager node becomes unreachable.

The nodes constantly exchange heartbeats to verify that every node in the cluster is reachable. If all nodes respond to the heartbeats, the cluster is considered "Healthy". If one or more nodes stop responding for a given length of time, the cluster is considered "Degraded".

Important: Cryptographic Security Platform Compliance Manager supports two-node and three-node clusters. You must have at least a two-node cluster.