corosync-keygen - Generate an authentication key for Corosync.
If you want to configure corosync to use cryptographic techniques to
and privacy of the messages, you will need to generate a private key.
corosync-keygen creates this key and writes it to
This private key must be copied to every processor in the cluster. If
private key isn't the same for every node, those nodes with nonmatching
keys will not be able to join the same configuration.
Copy the key to some security transportable storage or use ssh to
key from node to node. Then install the key with the command:
unix#: install -D --group=0 --owner=0 --mode=0400
If a message "Invalid digest" appears from the corosync executive, the
are not consistent between processors.
Note: corosync-keygen will ask for user input to assist in generating
entropy unless the -l option is used.
OPTIONS-l Use a less secure random data source that will not require user
input to help generate
entropy. This may be useful when this utility is used from a
Generate the key.
Corosync Cluster Engine Authentication key generator.
Gathering 1024 bits for key from /dev/random.
Press keys on your keyboard to generate entropy.
SEE ALSOcorosync_overview(8), corosync.conf(5),