Create a high availability VSatellite group
Table of Contents
Expand all | Collapse all
-
- Activate Next-Generation Trust Security
-
-
- Configure AWS connection
- Configure Azure Key Vault connection
-
- Workload Identity Federation authentication
- Workload Identity Federation - Azure Identity Provider authentication
- Next-Gen Trust Security Generated Key authentication
- User permissions
- Workload Identity Federation authentication
- Next-Gen Trust Security Generated Key authentication
- User permissions
- Supported OIDC claims
-
-
-
-
- Create an F5 BIG-IP LTM machine
- Create a Microsoft Azure Private Key Vault machine
- Create a Microsoft IIS machine
- Create a Microsoft Windows (PowerShell) machine
- Create a Microsoft SQL Server machine
- Create a Common KeyStore machine
- Create a Citrix ADC machine
- Create an Imperva WAF machine
- Create a VMware NSX Advanced Load Balancer (AVI) machine
- Create an A10 Thunder ADC machine
- Create a Cloudflare machine
- Create Kemp Virtual LoadMaster machine
- Create a Palo Alto Panorama machine
-
- Provision to an F5 BIG-IP LTM
- Provision to a Microsoft Azure Private Key Vault
- Provision to Microsoft IIS
- Provision to Microsoft Windows (PowerShell)
- Provision to Microsoft SQL Server
- Provision to a Common KeyStore
- Provision to a Citrix ADC
- Provision to an Imperva WAF
- Provision to VMware NSX Advanced Load Balancer (AVI)
- Provision to an A10 Thunder ADC
- Provision to Cloudflare
- Provision to a Kemp Virtual LoadMaster
- Provision to Palo Alto Panorama
-
-
- 47-Day Validity Readiness TLS Certificates dashboard
- About the Certificate Inventory
- Managing certificate lifecycle settings
- Reissuing certificates in Next-Gen Trust Security
- Downloading certificates, certificate chains, and keystores
- Retiring, recovering, and deleting certificates
- Finding certificates in the certificate inventory
- Importing certificates from a CA using EJBCA
- Notification Center overview
- Domain-based validation for external emails
- Managing user accounts
- Troubleshooting
Create a high availability VSatellite group
You can create a high availability (HA) group of VSatellites to improve service reliability for Enhanced Discovery, CA Connectors, and Machines. An HA group allows operations to start on any healthy VSatellite in the group if the primary VSatellite becomes unavailable.
Prerequisite
- You must already have a primary VSatellite deployed.
- All VSatellites in the group must be able to access the same resources needed by the services (such as discovery targets, machine identity endpoints, or certificate authorities).
- Existing VSatellites are considered primary VSatellites by default if they were deployed before HA support was enabled.
- This feature currently supports all CA connectors except Microsoft ADCS.
To create a high availability VSatellite group
- Go to the VSatellites page.
- Click New.
- In the Download step, copy the command and install vsatctl on your target Linux host.
- Click Continue to proceed to Preflight.
- Run the provided command to execute the preflight checks.
- Click Continue to go to Deploy.
- Select the checkbox I'm creating replicas.
- From the Primary VSatellite dropdown, select an existing primary VSatellite.
- In Deployments, specify how many replicas you want to deploy. You can enter up to 10.
- Copy and run the generated installation command on each target machine to deploy the replica VSatellites.
- Optionally, click Test to confirm whether each deployed VSatellite is up and running.
- Click Done.
The replica VSatellites will now appear on the VSatellites page with their assigned primary. The system will automatically route new service requests to any healthy VSatellite in the group.