Configuring the authentication broker on node sys5

Last published : Sep 11, 2026
To configure the authentication broker on node sys5
  1. Extract the embedded authentication files and copy them to temporary directory:
    \# mkdir -p /var/VRTSvcs/vcsauth/bkup\# cd /tmp; gunzip -c /opt/VRTSvcs/bin/VxAT.tar.gz | tar xvf -
  2. Edit the setup file manually:
    \# cat /etc/vx/.uuids/clusuuid 2>&1
    The output is a string denoting the UUID. This UUID (without { and }) is used as the ClusterName for the setup file.
    {UUID}
\# cat /tmp/eat_setup 2>&1
The file content must resemble the following example:
AcceptorMode=IP_ONLYBrokerExeName=vcsauthserverClusterName=UUIDDataDir=/var/VRTSvcs/vcsauth/data/VCSAUTHSERVERDestDir=/opt/VRTSvcs/bin/vcsauth/vcsauthserverFipsMode=0IPPort=14149RootBrokerName=vcsroot_uuidSetToRBPlusABorNot=0SetupPDRs=1SourceDir=/tmp/VxAT/version
  1. Set up the embedded authentication file:
    \# cd /tmp/VxAT/version/bin/edition_number; \
    ./broker_setup.sh/tmp/eat_setup    \# /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/vssregctl -s -f
    /var/VRTSvcs/vcsauth/data/VCSAUTHSERVER/root/.VRTSat/profile \
    /VRTSatlocal.conf -b 'Security\Authentication \
    \Authentication Broker' -k UpdatedDebugLogFileName \
    -v /var/VRTSvcs/log/vcsauthserver.log -t string
  2. Copy the broker credentials from one node in the cluster to sys5 by copying the entire bkup directory.
The bkup directory content resembles the following example:
\# cd /var/VRTSvcs/vcsauth/bkup/\# lsCMDSERVER  HAD  VCS_SERVICES  WAC
  1. Import the VCS_SERVICES domain.
    \# /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/atutil import -z \
    /var/VRTSvcs/vcsauth/data/VCSAUTHSERVER -f /var/VRTSvcs/vcsauth/bkup \
    /VCS_SERVICES -p password
    1. Import the credentials for HAD, CMDSERVER, and WAC.
    \# /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/atutil import -z \
    /var/VRTSvcs/vcsauth/data/VCS_SERVICES -f /var/VRTSvcs/vcsauth/bkup \
    /HAD -p password
  2. Start the vcsauthserver process on sys5.
    \# /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/vcsauthserver.sh
    1. Perform the following tasks:
    \# mkdir /var/VRTSvcs/vcsauth/data/CLIENT
\# mkdir /var/VRTSvcs/vcsauth/data/TRUST\# export EAT_DATA_DIR='/var/VRTSvcs/vcsauth/data/TRUST'\# /opt/VRTSvcs/bin/vcsauth/vcsauthserver/bin/vssat setuptrust -b \
localhost:14149 -s high
  1. Create the /etc/VRTSvcs/conf/config/.secure file:
\# touch /etc/VRTSvcs/conf/config/.secure