HP Serviceguard Toolkit for Integrity Virtual Servers User Guide

the service_restart value, set for the cmappmgr service in the guest package. If the number
of restart attempts exceeds the service_restart value, HP Serviceguard fails over the VM
guest package to its configured VM Host failover node, as shown in Figure 4 (page 17).
Figure 4 Failover of a VM guest due to an application failure
To configure the VM guest application monitoring service:
1. Create and distribute client or server security keys.
2. Configure the cmappmgr.conf file on VM Hosts.
3. Install cmappserver depots on VM guests.
4. Configure the cmappserver.conf file on VM guests.
5. To start or monitor specific applications in the VM guests, modify the VM guest package.
6. Test application monitoring and VM guest failover operation.
When you install HP Serviceguard A.11.19, or later on the VM Host cluster nodes, it installs the
cmappmgr or cmappserver software and creates the following files and directories:
• /etc/cmappmgr.conf(security configuration file)
• /usr/sbin/cmappmgr (cmappmgr daemon)
• /opt/hp/serviceguard/cmappserver (contains the cmappserver software
depots for HPUX, Linux, and Windows guests)
To configure application monitoring:
1. Create and distribute client or server security keys.
The cmappmgr and cmappserver daemons communicate through a secure SSL connection
using JSSE and JRE. The system administrator must generate SSL security keys and distribute
them to the cluster VM Hosts and VM guests. The security keys are used for authentication
during the initial cmappmgr or cmappserver connection. A keytool program shipped with
JRE is used for key management.
SSL setup overview
A public and private key pair must be generated for client-server communications. For VM
guest application monitoring, cmappserver on the VM guest functions as the server, and
cmappmgr on the VM Host functions, as the client. The signed public certificates are generated
using the Java keytool program. The signed public certificates must be initially distributed to
the VM Hosts and VM guests, to setup the secure communications (that is, server public
17