Start the PKI server, if the server is not running; perform To configure and enable a PKI server.

Note: The PKI server is required for internal system configuration purposes.

Log in to any auxiliary database station as the root user.

Open a console window.

Enter the following:

# cp /opt/nsp/nfmp/auxdb/install/config/install.config.default /opt/nsp/nfmp/auxdb/install/config/install.config ↵

Open the /opt/nsp/nfmp/auxdb/install/config/install.config file using a plain-text editor such as vi.

CAUTION Service disruption

Changing a parameter in the auxiliary database install.config file can have serious consequences that include service disruption.

Do not change any parameter in the install.config file, other than the parameters described in the step, without guidance from technical support.

Edit the following lines in the file to read:

hosts=internal_IP1,internal_IP2...internal_IPn

export_hosts=internal_IP1[export_IP1],internal_IP2[export_IP2]...internal_IPn[export_IPn]

where

internal_IP1, internal_IP2...internal_IPn are the IP addresses that the auxiliary database stations use to communicate with each other

export_IP1, export_IP2...export_IPn are the IP addresses that the stations use for communication with other components in the deployment

The following is an export_hosts configuration example; see Table 14-69, Auxiliary database station addressing for more information.

export_hosts=10.1.1.10[198.51.100.10],10.1.1.11[198.51.100.11],10.1.1.12[198.51.100.12]

Table 14-69: Auxiliary database station addressing

Notes:

1. If required, for a single-station auxiliary database you can specify the same address for internal and external communication. In such a scenario, you specify the same address for internal_IP and export_IP.

To enable TLS, edit the following lines in the file to read as shown below:

Note: The secure value must match the secure value in the auxdb section of the NSP and NFM-P system configurations.

secure=true

pki_server=server

pki_server_port=port

where

server is the PKI server IP address or hostname

port is the PKI server port number

Save and close the install.config file.

Enter the following:

# /opt/nsp/nfmp/auxdb/install/bin/auxdbAdmin.sh install ↵

The script sequentially prompts for the root user password of each auxiliary database station.

Enter the required password at each prompt. The script installs the software on the station.

When the script execution is complete, if you are deploying a geo-redundant auxiliary database, perform the following steps on each auxiliary database station in the current cluster.

1. Log in to the station as the root user.

2. Open a console window.

3. Enter the following:

   bash$ su - samauxdb ↵

4. Enter the following for each station in the geo-redundant cluster:

   bash$ ssh-copy-id station_IP ↵

   where station_IP is the IP address of a station in the geo-redundant cluster

Perform the following steps on each auxiliary database station in the current cluster.

1. Log in to the station as the root user.

2. Open a console window.

3. Enter the following:

   # systemctl start nspos-auxdbproxy.service ↵

   The auxiliary database proxy starts.

If no other components are to be deployed, stop the PKI server by entering Ctrl+C in the console window.

Close the open console windows.

End of steps