Configure the failover cluster

During the configuration process, you switch between the primary and the secondary computer. Start with the secondary computer.

The Management Server service is not available during the configuration. Milestone recommends that you schedule downtime during the configuration.

The wizard replicates the data from the primary to the secondary computer. To keep your existing VMS data, select your current management server as the primary computer.

1. On the secondary computer:

   1. From the computer taskbar, right-click the Management Server Manager icon and select Configure failover management server.

   2. Select Configure the secondary computer, then Continue.

   3. A message informs you that the management server is unavailable during the configuration. Select Confirm.

   4. On the Select connection protocol page, select a protocol for communication with the failover web console. Select Continue. The wizard prepares the secondary computer.

      Milestone recommends that you use a secure connection to the failover web console.

      By default, HTTP does not provide user authentication. If you select HTTP and do not enable basic user authentication, all users from your network can access the failover web console and stop the management server.

   5. A new page opens, informing you that the preparation of the secondary computer has succeeded.

      If you selected HTTPS: save the security code. You need to specify the security code on the primary computer to establish a secure connection between the primary and the secondary computer.

   You are now ready to configure the primary computer.

2. On the primary computer:

   1. From the computer taskbar, right-click the Management Server Manager icon and select Configure failover management server.

   2. In the Failover management server wizard, select Configure the primary computer, and then Continue.

   3. A message informs you that the configuration will fail if the secondary computer is not configured. Select Confirm.

   4. On the Select connection protocol page, select the same communication protocol you selected for the secondary computer. Select Continue.

   5. On the Connect to the secondary computer page specify the required system information:

      • Secondary computer (FQDN): specify the fully qualified domain name of the secondary computer. It should follow this format: [hostname].[domain name]. Example: host.domain.com

      • Failover license: if you have purchased a failover license, you can add it now on this computer. If you leave the field blank and continue, you can still configure the failover management server using a demo license and add a license later.

        If you don't add a license, the management server stops after three days.

        You must add the same XProtect Management Server Failover license on both computers.

      • Virtual IP address: this is the IPv4 address that is shared between the computers. Specify an available IPv4 address in your network that will replace the actual address of the management server. All remote servers, including the recording server, communicate with this address.

      • (For HTTPS only) Security code: specify the security code from the secondary computer to establish a secure connection between the primary and the secondary computer.

      Select Continue.

   6. If you have not added a license, a message informs you that the management server becomes unavailable after three days with the demo license. Select Continue.

      The wizard configures the failover cluster and copies the SQL databases and content from the primary computer to the secondary computer. It may take 5 to 10 minutes, depending on the system load and connection speed.

   7. (For HTTPS only) On the Generate certificates page, create a user name and password for the admin role, then select a folder on your computer to save the certificates. If you do not select a destination folder, the certificates are exported to C:\Users\{user}\Documents.

      Select Continue. The wizard generates the certificates and saves them to the selected folder. If needed, you can create more certificates later.

   8. A new page opens, informing you that the configuration of the primary computer succeeded.

   Go to the secondary computer to finish the configuration.

3. On the secondary computer:

   1. Confirm that you have completed the configuration on the primary computer, and then select Continue.

   2. On the Add a failover license on this computer page, add the failover license that you purchased. If you leave the field blank, the system will use a three-day demo license. Select Continue.

   3. The wizard informs you about the result:

      • If the configuration failed

        You can remove the current configuration and start the configuration process again, see Remove existing failover cluster configuration. 

      • If the configuration succeeded

        You can close the wizard. The failover web console opens automatically on the secondary computer.

        If you have selected HTTPS as the connection protocol, you won't be able to see the web console until you install the server certificate and a user certificate. See Installing certificates.

        The primary computer (node1) takes a PRIM state and the secondary computer (node2) takes a SECOND state. If needed, the states can be swapped.

        To complete the setup, you must register the remote servers. See Register remote servers.

        If you did not add a license during the configuration, you have the option to add one from the Manage your configuration page. See Add a license for XProtect Management Server Failover.

   A shortcut to the failover web console is added to your desktop.