The secondary Management Server (MS2) is installed in the following steps:
Install the Management Server software on the secondary server
host (by installing the ssh-mgmt-server package).
Set up replication of configuration and data files.
The following configuration and data files are replicated from MS1:
/etc/opt/ssh-mgmt/server
/var/opt/ssh-mgmt/server/cds
/var/opt/ssh-mgmt/server/dists
The contents of /etc/opt/ssh-mgmt/server do not change during
normal operation of the Management Server. They may change when the Management Server
software is upgraded, at which point the contents need to be replicated to
MS2 again.
The contents of /var/opt/ssh-mgmt/server/cds and
/var/opt/ssh-mgmt/server/dists are updated whenever managed software
is imported (with the ssh-mgmt-package-import tool). It is
recommended that all software imports are done on MS1, and the contents of
these directories are automatically replicated to MS2. If SSH Tectia Manager
is not used for software deployment, these directories do not need to be
replicated.
File replication needs to be implemented with tools not provided by
SSH Tectia Manager, as it does not have a built-in replication mechanism. Using
rdist is recommended (for example, over a Secure Shell tunnel).
Set-up failover:
It is recommended that a network monitoring system is set up to monitor the availability of the primary Management Server (for example, by setting up an agent or watchdog process to poll the administration web interface on MS1).
![]() | Note |
|---|---|
Running more than one Management Servers simultaneously against the same database will cause severe problems and even corruption of the database. |
Currently, the Management Server does not have any failsafe mechanism to detect and avoid this situation. Therefore, it must be made sure that both servers are not actively connected to the database at the same time.
The Management Agents connect to the Management Server using the configured host name of the server. If the connection is lost, the Management Agents will automatically try to reconnect at randomized increasing intervals. For every reconnection attempt, they resolve the host name again from the DNS.
When failover to MS2 needs to be done, a simple DNS update for the Management Server host name to point to MS2 instead of MS1 is enough to let the agents reconnect to MS2.