Managing the KeyControl Mapping on a VM
You can associate a KeyControl Mapping with a VM at any time. The same procedure can also be used to change the Mapping currently associated with a VM. This can be done either through the KeyControl webGUI or through the CLI on the VM itself.
If you use the webGUI, you can also use the Multi-Select option to set the Mapping for multiple VMs at the same time.
Managing the Mapping Through the webGUI
- Log into the KeyControl webGUI using an account with Cloud Admin privileges.
- In the top menu bar, click Cloud.
-
Click on the VM whose Mapping you want to set and select Actions > Set Mapping.
Tip: If you want to set the same Mapping for multiple VMs, enable the Multi-Select option and then click on each of the VMs whose Mapping you want to set.
-
Select the Mapping you want to use from the drop-down list, then click Set Mapping.
KeyControl automatically communicates the new Mapping information to the VM. After that, the VM will connect to KeyControl using the first node in the Mapping. If that node is unavailable, the VM will automatically fail over to the next node in the Mapping. For details, see High Availability Between a VM and the KeyControl Cluster.
You can view the progress of the Mapping assignment on the User Tasks tab for the VM. You can also view the currently-assigned Mapping on the VM's Details tab in the Mapping field.
Managing the Mapping Through the CLI
Log into each VM you want to associate with the KeyControl Mapping and enter the command hcl updatekc –a [-u username [-s password]], where:
-uis a KeyControl user account with Cloud Admin privileges. If you do not enter a user account name you will be prompted for one.-sis the password for the KeyControl user account. If you do not enter a password you will be prompted for one.
The Policy Agent then queries KeyControl for the list of available KeyControl Mappings. Type the number corresponding to the Mapping you want to use and press Enter. For example:
# hcl updatekc -a Getting KeyControl Mapping information Please provide the KeyControl login details username: cloudadmin password: ******** This VM can be added to one of the following KeyControl Mappings --------------------------------------------------- 1 : San Francisco Datacenter 2 : AWS VMs --------------------------------------------------- Please select KeyControl Mapping (0 to skip): 1 KeyControl Mapping server description KC-1, ip 192.168.140.151, port 443 server description KC-2, ip 192.168.140.152, port 443 Updated KeyControl list with KeyControl nodes 192.168.140.151:443,192.168.140.152:443
Note: If you select 0, no changes are made to the current IP addresses or KeyControl Mapping associated with the VM.
|
Follow us: |
