Primary Instance
The primary instance is the initial AM system that you deploy. Once you deploy a primary instance, you can add replica instances. It is possible to promote a replica instance to replace the primary instance in maintenance or disaster recovery situations.
The primary instance is the only system in the deployment that allows you to perform all AM administrative tasks. Some administrative tasks can be performed on a replica instance, for example, replica promotion and log file collection.
The main functions of the primary instance include the following:
Authenticating users.
Enabling administration of AM data stored in the internal database. You can perform tasks such as importing and assigning SecurID tokens, enabling risk-based authentication (RBA), adding LDAP identity sources, configuring self-service, generating replica packages, and generating agent configuration files and node secrets.
Replicating changes due to administration and authentication activities.
Handling self-service requests.
Maintaining the most up-to-date AM database.
Related Articles
Update the Primary Instance Hostname and IP Address on a Replica Instance Number of Views Getting the RSA backup files from the RSA Authentication Manager 8.x primary instance Number of Views Synchronize Agent Authentication Records on the Primary Instance Number of Views Replica fails to attach to the RSA Authentication Manager 8.1 primary instance Number of Views Manually Reset the Original Primary Instance as a Replica Instance Number of Views
Trending Articles
Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide How to Download OTP Token Seed Files from myRSA RSA Authentication Manager 8.9 Release Notes (January 2026)
