Administer > SA Core and component security > SA Core recertification > Add a new core or slice to a recertified SA core multimaster mesh

Add a new core or slice to a recertified core multimaster mesh

Prior to SA 10.10, the core recertification procedure did not re-sign the Model or Word Repository. The original cert materials were archived on the core and was used when pre-recert data was to be validated.

From SA 10.10 onwards, you can choose whether or not to run Phase 11 to resign your Model or Word Repository.

  • When you add a new core to a mesh that has been recertified without executing Phase 11, you must manually copy the old or archived keys to the new core before starting the installation.

    Copy the following folder from infra server that has been recertified to all the slices in the new core:

    /var/opt/opsware/crypto/vault/archives

    Copy the following folders from a slice that has been recertified:

    /var/opt/opsware/crypto/waybot/archives/

    /var/opt/opsware/crypto/wordbot/archives/

  • When you add a new slice to a mesh that has been recertified without executing Phase 11, you must manually copy the old or archived keys to the new slice before starting the installation.

    Copy the following folders from a slice that has been recertified:

    /var/opt/opsware/crypto/waybot/archives/

    /var/opt/opsware/crypto/wordbot/archives/