Showing results for 
Show  only  | Search instead for 
Did you mean: 

How to Setup a TIE Master and Slave

No ratings


This article is designed to help you install two TIE servers, one master, and one slave. This setup is the minimum requirement for any production or pilot rollout of TIE, as it provides redundancy for the TIE database (depending on the size of your organization, you might need more than this). In an emergency, the slave server can be "promoted" to become the TIE master and as it holds an exact replica of your TIE database, you would not lose any data.





General Setup


To get started, you will have to deploy the TIE OVA VM package to two VM servers. It is recommended that these two servers are "on the same network", meaning they should have a fast (LAN speed) link and no firewall between them.



Start with the server that should become your TIE master and follow the initial screen prompts to give the machine a root password, IP, GW and DNS.


If you would like more details on the general setup, please click here.


Make note of the "Operational Account" as this will be the account that the slave server will use to connect to the master later.






TIE Master


Once you reach the "Service Selection" screen, make sure to select both, the "DXL Broker" as well as the "TIE Server" options.




Next, you need to select "M" for the "Master" server option. No further configuration is needed for the master server. Proceed to the next step in the wizard and finish the installation.




TIE Slave


Repeat the same general setup steps for your TIE slave (more details here).

Once you reach the "Service Selection" screen, make sure to select both, the "DXL Broker" as well as the "TIE Server" options.




Next, select "S" for the "Slave" option. Additional information you need to provide are:

- IP of the TIE master server

- Username and password set for the "Operational Account" on the master


Afterwards proceed to the next step in the wizard and finish the installation.



In case of Emergency


In case your TIE master server becomes unavailable, you can "promote" the slave server to be the new master.


To do so, please login to the console of the slave server (either via SSH or via the VM ESX console) with your "Operational Account" credentials.




Next, run the command

sudo reconfig-tie




In the dialog that opens, switch from "S" for Slave mode to "M" for Master




After confirming your selection, the TIE server will autmatically reconfigure its services. A reboot of the machine is NOT required.





Your Slave server is now the new TIE master server.


In case you would like to "demote" the master back to a slave server, run the same reconfig-tie command and simply select "S" for slave again





What mode is my TIE server in?


To see what mode your TIE server is currentl;y running in, you can use ePO.

Navigate to the System Tree and select your TIE server in question. Then navigate to Products >> McAfee Threat Intelligence Exchange Server and then scroll down to the bottom to see the "Server Operation Mode"




Alternatively you can lookup the operating mode from the command line of the TIE server with the command:

grep -B 1 startMode /opt/McAfee/tieserver/conf/



Labels (1)
Version history
Revision #:
2 of 2
Last update:
‎03-15-2018 01:11 PM
Updated by:

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community