|
Home > Archive > BizTalk Server General > November 2004 > SSO Failover. Do we really need a cluster?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
SSO Failover. Do we really need a cluster?
|
|
| Filipe Pinto 2004-11-10, 5:48 pm |
| Hi,
I'm currently running a two server BizTalk group.
Both servers are running SSO pointing to the same SSODB.
If one of the servers goes down, will the SSO service still be able to
function or does BizTalk really needs SSO to be running on a separate cluster
to insure 100% failover?
Thank you,
Filipe Pinto
| |
| Tomas Restrepo \(MVP\) 2004-11-10, 5:48 pm |
| Filipe,
>
> I'm currently running a two server BizTalk group.
>
> Both servers are running SSO pointing to the same SSODB.
>
> If one of the servers goes down, will the SSO service still be able to
> function or does BizTalk really needs SSO to be running on a separate
cluster
> to insure 100% failover?
In theory, at least, there is only one SSO server running as the master
secret server in a biztalk group. Given that, I presume that your current
setup has one of the servers running as the SSO Master Secret Server, while
the other is just a plain SSO Server.
Now, the Master Secret server is *not* 100% needed for normal operation, as
it is only fully required when you're encripting data to be stored in the
SSO DB; the rest of the SSO Servers in the group are fully capable of
decrypting the data in there on their own even if the Master Secret Server
goes down
(this presumes you're not doing any operations that would require new
encription in the SSODB and you that the Master Secret Server doesn't go
down just after changing the master secret without having replicated the
key...)
At least this is how I understand it....
--
Tomas Restrepo
tomasr@mvps.org
|
|
|
|
|