Configure Proficy Authentication Installation

This topic describes Proficy Authentication installation setup in a high available environment.

Before you begin

For fresh installation, you can straightaway proceed with the procedural steps in this topic. But, if you want to use an existing database, do the following before you start with the procedural steps:
  1. Copy your Proficy Authentication existing database (found in the Postgress database location) from wherever installed to the shared drive created using the iSCSI server. When you copy, make sure the cluster is pointing to the drive before copying the database. For example, if the cluster is pointing to Node1, then copy the database to Node1.
  2. Make a note of the location path where you copied the database in the iSCSI server. For example, F:\UaaConf. You need to provide this path for installing Proficy Authentication on Node1 and Node2 machines.

About this task

To install Proficy Authentication on the iSCSI initiators (Node1 and Node2), make sure the shared drive in available on the node where you want to run the installation.

Procedure

  1. Log in to the iSCSI initiator Node1 server.
  2. Open Failover Cluster Manager and verify that the cluster role is associated to the node where you want to install Proficy Authentication.
    If not, then follow these steps to associate the node server:
    1. Right-click your cluster role and select Select Node.
      The Move Clustered Role screen appears.
    2. Select the Node1 server, and select OK.
      Once the cluster is mapped to Node1, the shared drive is available on Node1.
  3. Run Proficy Authentication installation setup, and provide these details for the respective screens:
    1. In All Host Names field, enter hauaacluster.cluster.ge.com as the leading hostname, followed by any other hostname/s.
    2. This step applies for associating existing database. Enter the iSCSI server shared drive location path where you copied the Proficy Authentication database. Refer to the steps at the beginning of this topic.
      For example, F:\UaaConf
  4. Log in to the iSCSI initiator Node2 server, and repeat the above steps to install Proficy Authentication on Node2.
  5. After installing Proficy Authentication on both the nodes, copy the DATABASE_PASSWORD registry key from the last installed node to overwrite the registry key in the first installed node.
    For example, in the following scenario:
    1. First Proficy Authentication is installed successfully on the Node1 machine.
    2. Next Proficy Authentication is installed successfully on the Node2 machine.
    Node2 is considered as the latest installation. Node1 is considered as the first installation. So, copy the Node2 registry key and overwrite the Node1 registry key.
  6. Copy and replace the UAA.yaml file from Node 2 (latest installation) to Node 1 (first installation).
    The file is located here C:\ProgramData\GE\Proficy Authentication\uaa-config
  7. Copy server.crt and server.key from Node 2 (latest installation) to Node 1 (first installation).
    The certificates are located here: C:\Program Files\GE\Proficy Authentication\httpd\conf\cert
  8. After copying the certificates (to Node1), rename server.crt to server.pem.
  9. Open Certificate Management Tool on Node1 from the desktop shortcut, and import the certificates as follows:
    1. For Certificate File, select the server.pem file created in the earlier step.
    2. For Key File, select the server.key file.
    3. Select Import.