Task 6. Establish trust between all nodes in a cluster

Establish cluster node trust in Cortex XSOAR 8.10 On-prem.

This task is not relevant for a standalone deployment (single node).

For each VM (node) in a cluster, the nodes must have SSH connections between them, where all the nodes trust one another. To establish trusted connections in a cluster, one node is designated as the signing server host, generating a token for secure communication and authentication. Other nodes connect to the host using the token displayed on the host's screen.

The IPs of all VMs (nodes) in a cluster as well as the virtual IP must be on the same subnet, they currently cannot be split across subnets.

To implement built-in High Availability, after establishing trust between all nodes in a cluster, in the cluster installation step (Task 7) you need to set a single entry point to distribute traffic across the nodes in the cluster. Do this by setting the Cluster FQDN to either the virtual IP address or to the reverse proxy/ingress controller IP address.

To configure backup and restore in your tenant, see Back up data.

1. In the textual UI menu for the VM you want to be the host, select Connect Nodes.

2. Select Host.

   A message displays that this action cancels prior trust established with other nodes. Select Yes to continue.

   This node becomes the host, and a token is generated on the screen. Copy the token, for example:

   Keep this window open (do not select Stop) until trust is established between all nodes to enable the host to listen for the token from the other nodes.

3. In the textual UI for each additional node (VM) in the cluster:

   1. Select Connect Nodes.

   2. Select Join.

   3. Paste the Token generated for the host.

   4. Enter the Host IP Address.

   5. Select Submit.

   A message displays that this action cancels prior trust established with other nodes. Select Yes to continue.

4. Select OK.

5. After trust is established between all the nodes in the cluster, go back to the host node and select Stop to close the listening window.