Primary and Secondary Server with a Shared Database and an Additional Read-Only Server

This comprehensive model combines the advantages High Availability and Disaster recovery. The Primary and Secondary servers are both active (read-write) and connected to a shared database, while an additional Read-Only server supports reporting, monitoring, or disaster recovery. This model ensures robust redundancy and seamless load distribution, making it suitable for high-traffic or enterprise environments.

1. Generating the Setup Packs in the Primary Server

Follow these steps to configure the primary server and generate the setup packs for the secondary server and the fallback read-only server:

1. Install the Password Manager Pro application on the server you intend to use as the primary server. During installation, select the server configuration as the High Availability Primary Server.
2. Once the installation is complete, start the Password Manager Pro service to initialize the server and the database.

Note: It is recommended to store the pmp_key.key file in a shared path accessible by all the servers in your environment.

3. If you have a running instance of Password Manager Pro, this will act as the primary server. You should disable any existing high availability configuration setup in your environment. If multiple read-only servers are configured in your environment, you should retain only one read-only server and remove the remaining read-only server configurations. Explore this link for the detailed steps to remove the read-only server configuration. If the key file is stored in a remote directory accessible by all the servers in your environment, ensure the full path of the remote location is updated in the manage_key.conf file.
4. Stop the Password Manager Pro service on the primary server, navigate to the bin folder within the installation directory, and run the following commands with administrator privilege:
• Windows - HAPostgreSQLAppSetup.bat <FQDN/IPAddress>
• Linux - HAPostgreSQLAppSetup.sh <FQDN/IPAddress>

Note: In the above commands, replace <FQDN/IPAddress> with the fully qualified domain name or IP address of the machine you intend to use as the secondary server.

5. Running the above scripts will initialize the database as a standalone Password Manager Pro PostgreSQL service and generate the setup pack for the secondary server. The database will run as a separate service with the service name Password Manager Pro PostgreSQL. The setup pack, named AppServerPack_<FQDN/IPAddress>.zip, will be available in the replication folder within the installation directory.
6. To generate the setup pack for the read-only server, run the following command from the bin folder within the installation directory:
• Windows - ROSetup.bat <IPAddress><Username><Password><Slotname>
• Linux - ROSetup.sh <IPAddress><Username> <Password><Slotname>

Note: Replace the placeholders with the actual values of the target read-only server. The Slotname should be a unique identifier for the replication slot.

7. Running the above script will create the setup pack with the filename ROPack_<Slotname>.zip inside the Replication folder within the Password Manager Pro installation directory.
8. After generating the setup pack, you should import the necessary certificates into the primary server by executing the following commands:
• Linux:
1. sh importCert.sh ../conf/ServerCer.cer
2. sh importCert.sh ../conf/CAcert.pem
3. sh importCert.sh ../agent/ServerCer.cer
• Windows:
1. importCert.bat ..\conf\ServerCer.cer
2. importCert.bat ..\conf\CAcert.pem
3. importCert.bat ..\agent\ServerCer.cer

Note: To install custom certificates, replace the certificate paths in the above commands accordingly.

9. Restart the PostgreSQL database running as a standalone service on the primary server.
10. Start the Password Manager Pro service on the primary server.

You have now successfully configured the primary server and generated the setup packs for the secondary and the read-only servers.

2. Configuring the Secondary Server

Follow these steps to configure the secondary server in the PostgreSQL high availability setup for Password Manager Pro:

1. Install Password Manager Pro on the machine you intend to use as the secondary server. During installation, select the server configuration as the High Availability Primary Server.

Note: Ensure the <FQDN/IPAddress> used while generating the setup pack matches the hostname or IP address of the server on which you are installing Password Manager Pro to use as the secondary server. Do not start the Password Manager Pro service after installation.

2. Copy the setup pack AppServerPack_<FQDN/IPAddress>.zip to the password manager pro installation directory and unzip its contents. This will overwrite relevant files on the secondary server with those required for configuration from the primary server.
3. If the key file is stored in a remote directory accessible by all the server, enter the full path of the remote location in the manage_key.conf file.
4. If the shared path is unavailable, replace the pmp_key.key file available on the secondary server with the key file available on the primary server, place it in any local directory on the secondary server, and update the key file path in the manage_key.conf within the installation directory.
5. Start the Password Manager service on the secondary server.

3. Configuring the Read-Only Server

Follow these steps to configure the read-only server in the PostgreSQL High Availability (HA) setup for Password Manager Pro:

1. Install Password Manager Pro on the machine you intend to use as the read-only server. During the installation process, select the server configuration as the Read-Only Server.
2. Navigate to the Password Manager Pro installation directory in the Read-Only server and extract the ROPack_<Slotname>.zip file. This will overwrite relevant files on the read-only server with those required for the read-only server configuration from the primary server.
3. If the key file is stored in a remote directory, supply the full path of the remote location in the manage_key.conf file.
4. If the shared path is unavailable, replace the pmp_key.key file available on the read-only server with the key file available on the primary server, place it in any local directory on the read-only server, and update the key file path in the <pmp-installation-directory>/conf/manage_key.conf file.
5. If the manage_key.conf file is not available in the read-only server, then create a new file named manage_key.conf and specify the key file path.
6. Import the necessary certificates into the read-only server by executing the following commands:
• Linux:
1. sh importCert.sh ../conf/ServerCer.cer
2. sh importCert.sh ../conf/CAcert.pem
3. sh importCert.sh ../agent/ServerCer.cer
• Windows:
1. importCert.bat ..\conf \ServerCer.cer
2. importCert.bat ..\conf\CAcert.pem
3. importCert.bat ..\agent\ServerCer.cer

Note: If you are using a custom SSL certificate, copy it from the primary server and paste it into the conf folder within the installation directory on the read-only server. To install custom certificates, replace the certificate path in the above command.

7. Start the Password Manager Pro service on the read-only server.

You have successfully configured the High Availability setup using the PostgreSQL database. Log into the primary server and navigate to Admin >> High Availability to view the status of the configured setup.