KeyControl Compliance Manager Nodes and Clusters

When you install KeyControl Compliance Manager, the process creates a KeyControl Compliance Manager node that can operate singly or be joined with other nodes to form an active-active cluster. These nodes can be installed in different geographic locations, but they must be able to communicate with each other.

All KeyControl Compliance Manager nodes in a cluster share configuration settings and policy information. Changes made on one node are automatically synced to all nodes in the cluster through an encrypted object store. This provides a failover mechanism in case a KeyControl Compliance Manager node becomes unreachable.

The nodes constantly exchange heartbeats to verify that every node in the cluster is reachable. If all nodes respond to the heartbeats, the cluster is considered "healthy". If one or more nodes stop responding for a given length of time, the cluster is considered "degraded".

Important: KeyControl Compliance Manager requires that you have a three-node cluster.