Patent ID: 8583600

Claim:
A method for deploying a new directory instance, the method comprising: cloning a configuration of an existing directory instance to the new directory instance, the existing directory instance executing in a first data processing system and the new directory instance executing in a second data processing system, wherein the existing directory instance and the new directory instance are each accessed according to a directory access protocol; cloning a schema of the existing directory instance to the new directory instance; determining whether the new directory instance is a peer of the existing directory instance; cloning data from the existing directory instance to the new directory instance responsive to the new directory instance being a peer of the existing directory instance; receiving a seed value from the existing directory instance; receiving a salt value from the existing directory instance; regenerating, using the seed value and the salt value, a new cryptographic information for the new directory instance, wherein the regenerating generates a new cryptographic key such that the new directory instance operates as a peer of the existing directory instance in the directory topology by using the new cryptographic key, and wherein the directory topology provides a first specification for use by an application to communicate with the new directory instance, and a condition that has to be satisfied for the existing directory instance to be cloned; using the seed value and the salt value in conjunction with a cryptographic algorithm used in the existing directory instance to generate cryptographic information in the new directory instance such that the existing directory instance and the new directory instance are cryptographically synchronized with each other; and making the new directory instance operational in a directory topology using the new cryptographic information for the new directory instance.