Checking KA server connectivity

To ensure that online license activation and automatic renewal can work, verify that the cluster can reach the Key Authentication (KA) licensing server. Run the checks from the primary node.

Prerequisites

• The required KA server ports are open, as described in Required external access.

To check KA server connectivity

1. Check TCP connectivity and the TLS handshake:

   # openssl s_client -servername ka.virtuozzo.com -connect ka.virtuozzo.com:5224

2. Verify the KA server certificate validity dates:

   # openssl s_client -connect ka.virtuozzo.com:5224 2>/dev/null | openssl x509 -noout -dates

The TLS handshake must complete successfully, and the certificate output must show valid dates. If the KA server is unreachable or TLS validation fails, automatic license renewal cannot complete until connectivity is restored.