Replication Hubs

Replication Hub is a cloud service that enables an instance of Syniti Replicate Desktop (installed on-premises) to connect securely with the Syniti Knowledge Platform (SKP). This service acts as a secure bridge to manage desktop replication processes from the Replicate module.

Replication Hub:

• Enables integration with Syniti Replicate Desktop, allowing you to leverage its capabilities directly through Replicate and other modules in the SKP.

• Allows secure authorization and authentication of requests from the SKP.

• Grants access to create, monitor, and run replications via Replicate > Monitor.

• Grants access to view replication logs for troubleshooting purposes.

• Allows you to restart the on-premises Windows Replication Agent without requiring direct access to the Windows Server.

The Replication Hubs page displays the following details:

Register a Replication Hub

To register a replication hub:

1. Verify you’re in the Admin module of the Syniti Knowledge Platform (SKP).
   Or
   Select Admin from the Profile menu to navigate to the Admin module of the Syniti Knowledge Platform.

2. Under Connectivity, click Replication Hubs in the Admin menu.

3. Click Register replication hub.

4. Specify a name for your replication hub.

5. To secure the connection between the SKP and the server instance on the client’s site, complete the following steps:

   Note

   Before securing your Replication hub, ensure that you have properly installed the SSL Certificate and/or generated the HMAC Secret key in Syniti Replicate installed on-site. Refer to the Configure Data Security section for more information

   1. Turn on the SSL Encryption toggle button to enable SSL Encryption for your connection between the SKP and the server instance on the client’s site.

   2. Turn on the HMAC Authentication toggle button to enable HMAC authentication and enter your HMAC Secret Key.

6. Enter the Address of the Syniti Replicate server instance on the client’s site. This must start with http:// or https:// based on the SSL Encryption toggle.

7. Select an SKP Connector.

8. Turn on the Windows Replication Agent toggle button to create and run replications from the SKP.

   Note

   When turned on, you can create and execute replications from SKP > Replicate. When turned off, you can still create replications but cannot execute them from SKP > Replicate. Turning off this feature can be useful for troubleshooting purposes.

9. Click Test and save.

Configure Data Security

You can strengthen the security for the connection (Replication Hub) between the SKP and the Syniti Replicate server instance on the client’s site using SSL Encryption, HMAC Authentication, or a combination of both based on your requirements.

SSL Encryption

Secure Sockets Layer (SSL) allows you to encrypt all network communication between the SKP and the Syniti Replicate server instance, ensuring data privacy during data transit.

To use SSL Encryption, ensure that:

• A valid SSL certificate is installed on the Syniti Replicate server instance.

• The Enable Agent HTTP SSL property must be set to True in Replication Agent Options > Advanced in the Management Center.

Starting with Syniti Replicate v11.0.0.16, the SSL Certificate is automatically generated and registered in the Syniti Replicate server instance during the setup of new installations or upgrades.

SSL Encryption can also be configured using the command line interface (CLI). Open Command Prompt from the server instance of the Syniti Replicate installation folder (usually C:\Program Files\Syniti\Syniti Replicate) and run the commands below as required for the configuration.

HMAC Authentication

Hash-Based Message Authentication Code (HMAC) verifies the integrity and authenticity of the message sent in each request and response between the SKP and the Syniti Replicate server instance. With HMAC Authentication, each requests from the SKP includes a timestamp and nonce to prevent reply attacks and duplicate requests to be accepted.

To use HMAC Authentication, ensure that:

• HMAC Authentication is configured and the HMAC Secret Key (or token) is generated using the Agent HTTP Authentication property in Replication Agent Options > Advanced in the Management Center.

• A Grace period is set (30 minutes by default) to allow the Syniti Replicate server instance accept requests using previously saved settings for the given time period.

  Note

  The grace period ensures zero-downtime when enabling/disabling authentication or rotating HMAC token. When security settings change in the Syniti Replicate server instance, requests using previous settings from the SKP remain valid until the grace period expires.

• You store the HMAC Secret Key safely and specify it while configuring a Replication Hub.

HMAC Authentication can also be configured using the command line interface (CLI). Open Command Prompt from the server instance of the Syniti Replicate installation folder (usually C:\Program Files\Syniti\Syniti Replicate) and run the commands below as required for the configuration.

Edit a Replication Hub

To edit a replication hub:

1. Verify you’re in the Admin module of the Syniti Knowledge Platform.
   Or
   Select Admin from the Profile menu to navigate to the Admin module of the Syniti Knowledge Platform.

2. Under Connectivity, click Replication Hubs in the Admin menu.

3. Locate the replication hub and click the Edit icon.

For details about a specific field, hover over the Help icon.

Delete a Replication Hub

To delete a replication hub:

1. Verify you’re in the Admin module of the Syniti Knowledge Platform.
   Or
   Select Admin from the Profile menu to navigate to the Admin module of the Syniti Knowledge Platform.

2. Under Connectivity, click Replication Hubs in the Admin menu.

3. Click the Name of the hub to delete

4. Click the More actions menu (…) and select Delete.

5. Click Confirm to the confirmation message.