6.7

Table Of Contents
Manage vCenter HA SSH Keys
vCenter HA uses SSH keys for password-less authentication between the Active, Passive, and Witness
nodes. The authentication is used for heartbeat exchange and file and data replication. To replace the
SSH keys in the nodes of a vCenter HA cluster, you disable the cluster, generate new SSH keys on the
Active node, transfer the keys to the passive node, and enable the cluster.
Procedure
1 Edit the cluster and change the mode to Disabled.
2 Log in to the Active node by using the Virtual Machine Console or SSH.
3 Enable the bash shell.
bash
4 Run the following command to generate new SSH keys on the Active node.
/usr/lib/vmware-vcha/scripts/resetSshKeys.py
5 Use SCP to copy the keys to the Passive node and Witness node.
scp /vcha/.ssh/*
6 Edit the cluster configuration and set the vCenter HA cluster to Enabled.
Initiate a vCenter HA Failover
You can manually initiate a failover and have the Passive node become the Active node.
A vCenter HA cluster supports two types of failover.
Automatic failover The Passive node attempts to take over the active role in case of an Active
node failure.
Manual failover The user can force a Passive node to take over the active role by using the
Initiate Failover action.
Initiate a manual failover for troubleshooting and testing.
Procedure
1 Log in to the Active node vCenter Server Appliance with the vSphere Web Client and click
Configure.
2 Under Settings select vCenter HA and click Initiate Failover.
3 Click Yes to start the failover.
A dialog offers you the option to force a failover without synchronization. In most cases, performing
synchronization first is best.
vSphere Availability
VMware, Inc. 84