> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-6.-establish-trust-between-all-nodes-in-a-cluster.md).

# Task 6. Establish trust between all nodes in a cluster

This task is not relevant for a standalone deployment (single node).

For each VM (node) in a cluster, the nodes must have SSH connections between them, where all the nodes trust one another. To establish trusted connections in a cluster, one node is designated as the signing server host, generating a token for secure communication and authentication. Other nodes connect to the host using the token displayed on the host's screen.

The IPs of all VMs (nodes) in a cluster as well as the virtual IP must be on the same subnet, they currently cannot be split across subnets.

{% hint style="warning" %}
To implement built-in High Availability, after establishing trust between all nodes in a cluster, in the cluster installation step (Task 7) you need to set a single entry point to distribute traffic across the nodes in the cluster. Do this by setting the Cluster FQDN to either the virtual IP address or to the reverse proxy/ingress controller IP address.

To configure backup and restore in your tenant, see [Back up data](/cortex-xsoar-8-on-prem/8.12/back-up-and-restore-cortex-xsoar/back-up-data.md).
{% endhint %}

1. In the textual UI menu for the VM you want to be the host, select Connect Nodes.
2. Select Host.

   A message displays that this action cancels prior trust established with other nodes. Select Yes to continue.

   This node becomes the host, and a token is generated on the screen. Copy the token, for example:

   Keep this window open (do not select Stop) until trust is established between all nodes to enable the host to listen for the token from the other nodes.
3. In the textual UI for each additional node (VM) in the cluster:

   1. Select Connect Nodes.
   2. Select Join.
   3. Paste the Token generated for the host.
   4. Enter the Host IP Address.
   5. Select Submit.

   A message displays that this action cancels prior trust established with other nodes. Select Yes to continue.
4. Select OK.
5. After trust is established between all the nodes in the cluster, go back to the host node and select Stop to close the listening window.

<br>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsoar-8-on-prem/8.12/install-cortex-xsoar/install-cortex-xsoar-on-a-vm-deployed-on-kvm/task-6.-establish-trust-between-all-nodes-in-a-cluster.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.