Re-establishing CP server and CP client communication after upgrading to 2048 bit key and SHA256 signature certificates
In case of CP server, when you upgrade the CP server cluster to use the enhanced security, the vcsauthserver gets 2048 bit SHA256 certificates and the trust information is no longer valid on the client clusters. This breaks the communication between CP server and CP client. To reinstate the communication, you must setup trust between CP server and CP client.
For each client node on VCS 6.0 and later, run the following command:
EAT_DATA_DIR=/var/VRTSvcs/vcsauth/data/CPSADM \
/opt/VRTSvcs/bin/vcsat setuptrust -b cpserver_ip_address:14149 -s high