Questions on EJBCA access in DR

[Faezz001]

My organization has EJBCA deployed in both production and disaster recovery (DR) sites. Currently, the database is configured in master-slave mode for replication. We would like to know if it is possible to access EJBCA in the DR site without disabling master-slave mode. Our goal is to verify that EJBCA DR runs smoothly.

[mike-agrenius-kushner]

Hi,

I wouldn't recommend it for audit reasons – even if you don't perform any operations on the DR site, the audit log is going to note that you've logged in and will also log any pages you access in the UI, which will cause the two databases to diverge. I'd recommend that you flip over the relationship before accessing the DR site, or consider converting your database setup to a cluster.

Cheers,
Mike