A.16 Synchronization Needs to be Started Manually in Sentinel High Availability After You Convert the Active Node to FIPS 140-2 Mode

Issue: When you convert the active node to FIPS 140-2 mode in Sentinel HA, the synchronization to convert all the passive nodes to FIPS 140-2 mode is not performed completely. You must start the synchronization manually.

Workaround: Manually synchronize all passive nodes to FIPS 140-2 mode as follows:

  1. Log in as the root user on the active node.

  2. Open the /etc/csync2/csync2.cfg file.

  3. Change the following line:

    include /etc/opt/novell/sentinel/3rdparty/nss/*;

    to

    include /etc/opt/novell/sentinel/3rdparty/nss;

  4. Save the csync2.cfg file.

  5. Start the synchronization manually by running the following command:

    csync2 -x -v