UMC Redundancy (User Management Component)

Here is where we must define the rules for which ports. By default, the included rule is to allow all traffic on all ports from 0 to 65535.

We now have our primary server and we are going to add our backup server. Within the cluster, we select "Add Host to Cluster".

We enter the name of our second server; however, the machine must be previously configured to be on the same network. 🙂

Just like we did with our primary server, we follow the wizard.

We have completed the configuration

What we have just configured is that each machine that is part of the cluster has its own IP and, in turn, shares a Virtual IP that we have defined. This functionality will balance the traffic, redirecting to the server that has a higher priority and, if it is not available, the next one will assume the role.

To verify that everything is working correctly, you should check that both servers have the configuration completed and, additionally, from a third machine, ping each one while disconnecting one and the other from the network to see if you can access correctly.

On this second server, we are going to repeat all the installation and operating system preparation steps as we described on the primary server, and what will change is the configuration, but all requirements must still be met, so follow the previous steps until the configuration moment

We run the command .\UMConf.exe -j -f

This command is to join an existing ring server
So the next response is obvious :-)

Now we need to specify our existing and online server ;-)

It will ask for the UMC Server username and password, not the operating system's; if everything is correct, we will get a warning that if we have configured Active Directory users, we have to do it here, which is not my case

After a few seconds, we will confirm the certificate between servers.

The certificates are hosted on their respective servers:

We have now configured our second server

Now we need to deploy on IIS and run the script that creates the entire architecture.

BACKUP SERVER

PRIMARY SERVER

TIPS

• Install all certificates on the WinCC RT Unified Servers.
• Check from the WinCC RT Unified servers that you can access via HTTPS and it is a secure connection. (Image below https://10.10.1.254/umc-idp/idpauthsite/index.html )
• Use the Virtual IP, which redirects you to the operational server.
• 100% Recommended Use the hosts file to define names / IPs in a Windows workgroup
• If you want to remove the configuration, run the command UMConf.exe -D -f

And with all these steps, everything should work perfectly :-)