Dell ObjectScale 1.3 Administration Guide

Create a federation of ObjectScale systems

Creating a federation of ObjectScale systems allows you to replicate IAM entities from one ObjectScale system to other systems.

Complete these steps on the ObjectScale system you wish to make the primary ObjectScale instance in the federation.

1. From the ObjectScale Portal user interface, click Administration > ObjectScale and then select Federation tab.
   The details on the ObjectScale instances in a federation that the user is authorized to view are displayed.
2. Click Create Federation and click YES to create the necessary federation CA and establish this ObjectScale instance as the primary.

   

   After you click Create Federation this ObjectScale system becomes the primary instance for the federation. You will no longer be able create additional federation CAs or join this ObjectScale instance to any other federations.
3. Ensure the instance is now listed as Primary in the ObjectScale Systems page.

Complete these steps on the ObjectScale system you wish to make a secondary ObjectScale instance in the federation.

4. From the ObjectScale Portal user interface, click Administration > ObjectScale and then select Federation tab.
   The details on the ObjectScale instances in a federation that the user is authorized to view are displayed.
5. Click Join Federation and download the federation signing request file, FederationSigning_<OBJECTSCALE_NAMESPACE>.xml.
   Ensure that this file is accessible by both ObjectScale instances.
6. From the primary ObjectScale instance, click New Remote Instances and upload the federation signing request file from the other ObjectScale instance. After uploading the xml file, click SAVE.

   

   Once you have uploaded this file, the primary ObjectScale instance automatically generates and downloads the signed request file, PostFederationSigning_<OBJECTSCALE_NAMESPACE>.xml. Additionally, the Secondary ObjectScale instance will now appear as a Not Trusted remote instance of ObjectScale within the federation managed by the primary ObjectScale instance.
7. From the secondary ObjectScale instance, click New Remote Instances and upload the signed federation signing request file from the primary ObjectScale instance.
   The primary ObjectScale instance will now appear as a Not Trusted remote instance of ObjectScale within the federation.
8. Finally, to complete the federation process linking these two ObjectScale instances, establish trust between the two ObjectScale instances.
   1. From the Secondary ObjectScale instance, select the checkbox of the primary ObjectScale instance that needs to establish trust with the Secondary ObjectScale instance and click Initiate Trust.
      The Initiate Trust window appears.
   2. Verify that the correct details are shown for the selected ObjectScale instance you wish to establish trust with in the federation and click Yes.

      

   3. From the primary ObjectScale instance, select the checkbox of the Secondary ObjectScale instance that needs to establish trust with the primary ObjectScale instance and click Initiate Trust.
   4. Verify that the correct details are shown for the selected ObjectScale instance you wish to establish trust with in the federation and click Yes.

      

   Each of the remote instances will attempt to establish trust, joining the instances in an ObjectScale federation. Initially, the ObjectScale instances are listed as Trust Initiated Trust Status as the federation service on each side tries to communicate to the remote instance over the objectscale-gateway-internal endpoint, and if this system-to-system communication is successful, it moves each remote instance to the Trusted Trust Status.