1COROSYNC-KEYGEN(8)          System Manager's Manual         COROSYNC-KEYGEN(8)
2
3
4

NAME

6       corosync-keygen - Generate an authentication key for Corosync.
7

SYNOPSIS

9       corosync-keygen [-k <filename>] [-l] [-h]
10

DESCRIPTION

12       If  you  want  to configure corosync to use cryptographic techniques to
13       ensure authenticity and privacy of the messages, you will need to  gen‐
14       erate a private key.
15
16       corosync-keygen creates this key and writes it to /etc/corosync/authkey
17       or to file specified by -k option.
18
19       This private key must be copied to every processor in the cluster.   If
20       the  private  key  isn't the same for every node, those nodes with non‐
21       matching private keys will not be able to join the same configuration.
22
23       Copy the key to some security  transportable  storage  or  use  ssh  to
24       transmit the key from node to node.  Then install the key with the com‐
25       mand:
26
27       unix#:     install     -D     --group=0      --owner=0      --mode=0400
28       /path_to_authkey/authkey /etc/corosync/authkey
29
30       If  a message "Invalid digest" appears from the corosync executive, the
31       keys are not consistent between processors.
32
33       Note: corosync-keygen will ask for user input to assist  in  generating
34       entropy unless the -l option is used.
35

OPTIONS

37       -k <filename>
38              This  specifies  the  fully  qualified path to the shared key to
39              create.
40              The default is /etc/corosync/authkey.
41
42       -l     Use a less secure random data source that will not require  user
43              input  to  help  generate entropy.  This may be useful when this
44              utility is used from a script or hardware random number  genera‐
45              tor is not available (f.e. in virtual machine).
46
47       -h     Print basic usage.
48
49

EXAMPLES

51       Generate the key.
52
53       # corosync-keygen
54       Corosync Cluster Engine Authentication key generator.
55       Gathering 1024 bits for key from /dev/random.
56       Press keys on your keyboard to generate entropy.
57
58       $ corosync-keygen -l -k /tmp/authkey
59       Corosync Cluster Engine Authentication key generator.
60       Writing corosync key to /tmp/authkey.
61

SEE ALSO

63       corosync_overview(8), corosync.conf(5),
64

AUTHOR

66       Angus Salkeld
67
68                                  2010-05-30                COROSYNC-KEYGEN(8)