Chat now with support
Chat with Support

Cloud Access Manager 8.1.1 - How To Configure for High Availability

Cloning the proxy host

To clone the proxy host
1
Provision a new host alongside the existing Dell™ One Identity Cloud Access Manager proxy host in the DMZ. For simplicity, we recommend that the host is of the same hardware and operating system type as the existing host, however no technical limitation applies. If you are using hosts with different hardware, the load balancer in front of the proxy hosts may require additional configuration to weight the number of requests in favor of the more powerful host.
2
On the new proxy host either:
·
Mount the Cloud Access Manager software ISO
or
·
Extract the Cloud Access Manager software ZIP file to a temporary location.
3
Start the Dell Autorun and navigate to the Install section.
4
Click Install on the Cloud Access Manager Proxy.
5
Accept the License Agreement and then click Next.
6
Enter the hostname of the first Security Token Service (STS) host you installed, for example the primary STS host.
7
Enter the shared secret for your Cloud Access Manager environment and click Install. The shared secret is defined during the configuration of the first STS host. To find the shared secret click Fallback Password and Shared Secret in the Settings section of the Cloud Access Manager Administration UI.
8
The proxy installation will now start, when the installation is complete, click Close.
9
Deploy a load balancer in front of the two Cloud Access Manager proxy hosts to distribute the traffic between the two hosts. This should be a layer 4 load balancer to allow Cloud Access Manager to handle the Secure Sockets Layer (SSL) connections from the users. Using a layer 7 load balancer, for example, would require the SSL connections to be terminated on the load balancer itself rather than on the Cloud Access Manager proxy hosts.

Update the network configuration to route traffic destined for the external fully qualified domain names used by the Cloud Access Manager proxy hosts to the VIP address of the load balancer, rather than the primary proxy host as before.

Note: The load balancer must have sticky IP enabled to ensure users always use the same proxy host unless in a failover situation.
10
From within the Cloud Access Manager Administration UI, click the Configuration Status icon in the top-right corner. Verify that you can see each Cloud Access Manager host and that the status of the components on each host is running and configured.

Verifying the new proxy host

To verify that the new proxy host is working correctly
1
Verify that users can log in to the Dell™ One Identity Cloud Access Manager portal as normal.
2
Stop the Cloud Access Manager proxy service on the existing proxy host, so that only the new proxy host is running.
3
Verify that users can still log in to the Cloud Access Manager portal as normal.
4
Open the Cloud Access Manager proxy log on the new proxy host, CloudAccessManagerProxy.log Search the log for entries containing the userid used to verify access to the portal. This will confirm the user was using the new proxy host. Also verify that the log entry contains the user’s IP address, typically their public IP address. If the IP address is that of the load balancer, the load balancer configuration may need to be updated to preserve the original client IP address rather than using its own.

Note: The private IP address for internal users is only visible if you have configured your internal DNS to resolve the proxy’s hostname to the private IP address of the proxy load balancer.
5
Restart the Cloud Access Manager proxy service and stop the Cloud Access Manager proxy service on the new proxy host.
6
Verify that users can still log in to the Cloud Access Manager portal as normal.
7
Open the Cloud Access Manager proxy log on the existing proxy host, CloudAccessManagerProxy.log. Search the log for entries containing the userid used to verify access to the portal. This will confirm the user was using the existing proxy host rather than the new host. Verify that the log entry contains the user’s IP address, typically their public IP address.
8
Restart the Cloud Access Manager proxy service.
9
From within the Cloud Access Manager Administration UI, click the Configuration Status icon in the top-right corner. Verify you can see each Cloud Access Manager host and the status of the components on each host is running and configured.

Legal notices

Copyright 2016 Dell Inc. All rights reserved.
This product is protected by U.S. and international copyright and intellectual property laws.
This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of Dell Inc.
The information in this document is provided in connection with Dell products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Dell products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, DELL ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL DELL BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF DELL HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Dell makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Dell does not make any commitment to update the information contained in this document.
If you have any questions regarding your potential use of this material, contact:
Dell Inc.
Attn: LEGAL Dept
5 Polaris Way
Aliso Viejo, CA 92656
Refer to our web site (quest.com) for regional and international office information.
Trademarks
Dell, the Dell logo and Dell™ One Identity Cloud Access Manager are trademarks of Dell Inc.and/or its affiliates. Microsoft, Windows, SQL Server and Microsoft .NET are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell disclaims any proprietary interest in the marks and names of others.
Legend
CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed.
WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death.
IMPORTANT NOTE, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating