Change the Policy Broker mode

50641 | Managing Policy Broker Replication | Web Security Solutions | Version 7.8.x

In some instances, it may become necessary to change the mode of a Policy Broker instance after installation. For example:

A deployment uses a single Policy Broker in standalone mode, and the organization wants to switch to a replicated environment.


	Note Policy Broker must reside on Windows or Linux servers, and not on appliances, to enable replication.

The machine hosting the primary Policy Broker has failed and is not immediately recoverable, so administrators want to transform a replica instance into the new primary.

An organization decides that a replicated environment is no longer necessary, and wants to switch the primary Policy Broker to standalone mode and uninstall the replica instances.

To make the change, an administrator must use the PgSetup command from the command line on the Policy Broker machine as follows:


	Note Before changing the mode from replica to standalone or primary, make sure no one is logged into the Web Security manager.

Stop all components connected to the Policy Broker instance whose mode you plan to change.

Windows: Open a command prompt and navigate to the Websense Web Security directory (C:\Program Files or Program Files (x86)\Websense\Web Security\), then enter the following command:

WebsenseAdmin stop

Linux: Navigate to the /opt/Websense/ directory and enter the following command:

./WebsenseAdmin stop

Appliance: In the Appliance manager, stop the Web Security, Network Agent, and Content Gateway modules.

Navigate to the Websense bin directory on the Policy Broker machine (/opt/Websense/bin/ or C:\Program Files or Program Files (x86)\Websense\Web Security\bin).

If you are on a Linux server, enter the following command:

export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/Websense/bin

Enter one of the following commands:

To change a Policy Broker from primary or replica to standalone mode:

PgSetup -m standalone

Make a note of the token that is displayed when the mode switch is complete. You will need this to update your Policy Server configuration later.

To change a Policy Broker to primary mode:

PgSetup -m primary -w <synchronization_password>

All replicas must use this synchronization password to connect to the primary and receive updated policy and configuration data.

Make a note of the token that is displayed when the mode switch is complete. You will need this to update your Policy Server configuration later.

To change a Policy Broker to replica mode:

PgSetup -m replica -l <replica_IP_address> -z <primary_IP address> -w <synchronization_password>