Enrolling a media server after extending a cluster enrolled with System Manager

Last Updated : Feb 10, 2023 |
Prolog information
Metadata
Keywords:
When you add media servers to a cluster that is enrolled in System Manager, then you must also enroll the new media server cluster nodes in System Manager.
Perform the following procedure to enroll a media server in System Manager after you have added the media server to a cluster which is already enrolled in System Manager.
Before you begin
  • Ensure that the media server is configured as part of an enrolled cluster, but it is not enrolled in System Manager.
  • Ensure that you have the password for System Manager Trust Management.
  • Ensure that there is network access between the media server and System Manager.
  • Ensure that the FQDN of the media server can be resolved by DNS or the local hosts file.
  • Ensure that the FQDN of the media server has the same parent domain as the System Manager FQDN used for Single Sign-On.
  • Ensure that the difference in system time between the System Manager server and the media server is within 10 minutes. The media server and System Manager must use the same NTP server for time.
  1. Navigate to EMSystem ManagerEnrollment.
  2. Click Begin Enrollment.
    ADDITIONAL INFORMATION:
    EM displays step one of the enrollment process.
  3. Type a name of your choice that helps you easily identify this server in the Element Administrative Name field. This value must be unique among all media servers enrolled with System Manager. This value cannot be updated after enrollment.
  4. Type a definition of your choice that describes this server in the Element Administrative Description field. This value cannot be updated after enrollment.
  5. Click Next.
    ADDITIONAL INFORMATION:
    EM displays step two of the enrollment process.
  6. In the Server Configuration section, provide the FQDN and port for System Manager. The Secondary System Manager configuration fields are optional. The default System Manager port is 443.
  7. In the Administrative Account section, provide the System Manager administrative account credentials required to register the Media Server.
  8. Click Next.
    STEP RESULT:
    EM displays step three of the enrollment process.
    Note:
    If EM cannot validate System Manager server certificates with the Media Server trust store, then EM displays the certificates received from System Manager. Click Acknowledge to proceed with the enrollment or Decline to end the enrollment process.
  9. Select one of the following options appropriate for your system:
    • If the current certificate setup in the cluster is correct on each Media Server and all the following are true for your system, then select Use existing certificates already imported and click Next:
      • The key identity certificate for the Media Server is in the Media Server key store.
      • The trust certificate to verify the System Manager key identity certificate is in the Media Server trust store. If the certificate chain is used, the trust certificates of root certificate authority and all intermediate certificate authorities must be in the Media Server trust store.
      • The key identity certificate for the Media Server is at least assigned to the OAM and EM service profiles.
    • Select Create a new System Manager-signed certificate when System Manager is the signing authority for certificates in the Media Server setup as the root certificate authority and a System Manager-signed certificate is not in the key store of the Media Server. Click Next to configure the certificate fields as follows:
      • Select the strength of the certificate key. Avaya recommends using strong security by selecting a Key bit length of 2048 or higher, and a Signature algorithm of SHA256 or higher.
      • Type the name of the organization using the certificate in the Organization and Organization Unit fields.
      • Type an ISO-3166 country code for the Country field.
      • Type the full name of the state or province in the State/Province field.
      • Type the location name in the City/Locality field.
      • If the subject alternative name with the server IP address is required for the certificate, select Include Subject Alternative Name with IP address and enter the IP address.
      • If the subject alternative name with the server FQDN is required for the certificate, select Include Subject Alternative Name with FQDN and enter the FQDN.
      • In the Trust Management section, provide the System Manager trust management enrollment password. This is the enrollment password that the media server must use to acquire a System Manager-signed certificate from System Manager Trust Management.
        See Administering Avaya Aura® System Manager or the Avaya Aura® System Manager Online Help for additional details about this password and when it expires.
      Note:
      If System Manager is the signing authority and serves as an intermediate certificate authority, do not select Create a new System Manager-signed certificate in the enrollment process. See Creating a new certificate signed by System Manager as the root certificate authority in the key store to set up the certificates then select Use existing certificates already imported.
  10. Click Next.
    ADDITIONAL INFORMATION:
    EM displays the final step of the enrollment process.
  11. Verify the System Manager enrollment information. Click Previous if any information needs to be changed.
  12. Click Enroll.
    ADDITIONAL INFORMATION:
    EM displays a progress spinner during the enrollment process. After the enrollment completes, the system restarts the Media Server SOAP service and EM.
  13. Close the EM browser window or tab.
    ADDITIONAL INFORMATION:
    Wait for the EM restart to complete.
  14. To verify the Media Server enrollment process, log in to each Element manager in the cluster using System Manager credentials
    ADDITIONAL INFORMATION:
    After enrolling with System Manager, you can use System Manager credentials to access EM.
Next steps
The enrollment process automatically assigns the System Manager-signed certificate to the media server OAM and EM service profiles. If the System Manager-signed certificate needs to be applied to other Media Server service profiles see Assigning a certificate to a service profile.
If required by the adopting solution, access System Manager to configure the location and application for the newly enrolled media server. See Location and application assignment on System Manager.
Related links
Configuring a Secondary server for a clusterConfiguring a Standard server for a cluster