When the primary data center fails, you can fail over to the secondary data center. To fail over, you need to modify the global load balancer or DNS record to point to the load balancer in the secondary data center.

See Using a DNS Record to Control Which Data Center is Active.

The VMware Identity Manager appliances in the secondary data center are in read-only mode. Therefore, most administrator operations, such as adding users or apps, or entitling users, are not available. See VMware Identity Manager Activities Not Available in Read-Only Mode.

Important: After you fail over to the secondary data center, you must clear all caches on the original primary data center. In case you need to fail over to the original primary data center, caches in that data center should be empty.

You can use a REST API to clear the cache. Run the following REST API from a REST client such as Postman:

PATH: /SAAS/jersey/manager/api/removeAllCaches

Method: POST

Add Headers:

Authorization: HZN <cookie_value>
Accept: application/vnd.vmware.horizon.manager.cache.removal.response+json
Content-type: application/vnd.vmware.horizon.manager.cache.removal.request+json’

Add in Body (raw) section:

{
"cacheNames":[]
}
Note:
  • You must run the API as the tenant administrator, that is, the administrator created in the System domain when you install VMware Identity Manager. Domain accounts synced from your enterprise directory cannot perform this function.
  • You can obtain the HZN cookie by logging into the VMware Identity Manager service as the tenant administrator, then accessing your browser's cookie cache.
  • Empty cacheNames indicates remove all caches.

Another way to clear cache is to reboot the virtual appliances.