Security must be as available as the system

in an HA architecture, security components (RACF databases, certificates, surrogate definitions) must be replicated and maintained at all sites.