Authenticating the Administration Console when SPAS is used

If your VCS cluster uses SPAS, set up authentication for the Administration Console by performing the following procedures in the order shown:

Install the SPAS client on the Enterprise Vault server computer on which you run the Enterprise Vault Administration Console.
Set up a trust between the Administration Console computer and the Veritas Security Service Root Broker for VCS (VCS SS Broker). Set up the trust only once, not for each node.

To install the SPAS client on the Administration Console server

Obtain the SPAS binaries. These binaries are included in the Symantec_Product_Authentication_Service folder of the VCS media kit. If you cannot locate the SPAS binaries, contact Symantec support.

Note:

The version of the SPAS binaries that you install on the Enterprise Vault server must be the same as the version that is installed on the VCS cluster nodes.
Run the SPAS installer on the Enterprise Vault server computer on which you run the Enterprise Vault Administration Console.

Select the Typical installation option, which installs the client feature only.

For detailed information on how to set up SPAS, consult Symantec Product Authentication Services QuickStart.

To set up a trust between the Administration Console computer and the VCS SS Broker

Open a Command Prompt window on the Enterprise Vault Administration Console computer.
Navigate to the bin folder of the SPAS client installation. The path is typically as follows:

C:\Program Files\Veritas\Security\Authentication\bin
Enter the following command:

vssat setuptrust --broker VCS_Broker_Name:2821 --securitylevel high

where VCS_Broker_Name is the VCS SS Broker node name.

For example:

vssat setuptrust --broker VCSNODEONE:2821 --securitylevel high

Note that you must precede the broker parameter and the securitylevel parameter with double dashes, as shown. The port number must be 2821.

If the trust is successfully created, the following message appears:
```
setuptrust
--------------------------  
--------------------------
Setup Trust with Broker:   VCS_Broker_Name
--------------------------
```