If you use an encrypted NSS volume in a OES Cluster Services cluster, you must manually enter the password for the volume on one of the servers only when you first start or restart the cluster. You use NSSMU to mount the encrypted volume on one of the OES servers and enter the volume password, then dismount volume before you can bring the cluster resource online for the first time.
NSS uses the password to create a key, which it stores in the server memory. The OES Cluster Services software passes the key to other nodes. After all servers hold the key, the volume is available while any one of the servers is still participating actively in the cluster. If all servers in the cluster fail, you must repeat this procedure when you recover the cluster and restart services.
Boot or restart the servers in the cluster.
If you automated the loading of cluster resources, the cluster reports that each resource is comatose because it cannot bring the corresponding encrypted volume online.
If you opt to manually start cluster resources, the cluster resources are not yet active.
From one of the nodes in the cluster, repeat the following steps for each of the encrypted volumes in the cluster.
In NSSMU, select Volumes.
In the Volumes list, select the shared volume you want to mount.
Press F7 to mount the shared volume.
When prompted, enter the password, then click OK.
If the server already knows the key for the volume, you are not prompted for the password.
In the Volumes list, select the shared volume that you want to dismount.
Press F7 to dismount the shared volume.
Follow the normal procedures to activate the cluster resources.
For information, see the OES 23.4: OES Cluster Services for Linux Administration Guide. The node passes the key information to the other nodes. While at least one of the servers is actively participating in the cluster, you do not need to reenter the encryption password again.