000022350 - How to upgrade database in RSA SecurID Appliance

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000022350
Applies ToRSA SecurID Appliance 1.0
New customers that purchase an appliance may wish to upgrade from an existing data structure
IssueHow to upgrade database in RSA SecurID Appliance
Resolution

Migrating Data from RSA ACE/Server

You can migrate data from any of the following versions of the RSA ACE/Server to an RSA SecurID Appliance: ACE/Server 5.1 (and patch versions) and ACE/Server 5.2 (and patch versions). If you have RSA ACE/Server version 5.0 or earlier, you must first upgrade to version 5.1 or 5.2 before proceeding with the migration. For more information about performing an upgrade from an earlier version, see the documentation for your RSA ACE/Server.

Before beginning the process of migrating data from an RSA ACE/Server on Windows to the RSA SecurID Appliance, you must first:

! Perform a Quick Setup of the RSA Appliance. For instructions, see the printed Getting Started document that came with your RSA Appliance package.

! Using the Appliance, add a Windows Administrator for each Realm Administrator that exists on the RSA ACE/Server. For more information, see the RSA SecurID Appliance 1.0 Owner?s Guide.

! Using the Windows Agent on the Appliance box, add each of these Realm Administrators to the Challenge Group. For more information, see the Web Agent documentation that shipped with your RSA SecurID Appliance.

Migrating from an RSA ACE/Server on Windows

The two central tasks involved in migrating data from an RSA ACE/Server to the RSA SecurID Appliance involve:

? Dumping the database files from the RSA ACE/Server, and

? Loading these files on the Appliance.

Dumping the Database Files from a Windows RSA ACE/Server

1. On the Windows Primary, access the RSA ACE/Server control panel by clicking Start > Control Panel > RSA ACE/Server.

2. In the RSA ACE/Server control panel, click Stop.

? When the Broker service stopped message appears, click OK.

? If the Broker Connections dialog box opens, click Yes.

3. Create a dump file for the Server database by clicking Start > Programs > RSA ACE/Server > Database Tools > Dump. A file named sdserv.dmp is created in the current directory.

4. Using the Appliance?s Remote Desktop, create a \dump directory on the RSA Appliance. For more information about using Remote Desktop, see the RSA SecurID Appliance Owner?s Guide on the Documentation CD.

Migrating Data from RSA ACE/Server to RSA Appliance 1.0

5. Copy the sdserv.dmp and license.rec files from the Windows system running the RSA ACE/Server to the \dump directory on the Appliance. If you use FTP to transfer the files, copy them in binary mode.

Note: Do not copy these files to the C:\\ace\data directory on the RSA Appliance.

RSA Appliance now contains the dump files. You are ready to load these dump files.

Loading the RSA ACE/Server Database Files from the Appliance

Important: Make sure no administration sessions are connected to the database, and notify any remote administrators of the impending shutdown.

1. Using the Appliance?s Remote Desktop, access the RSA ACE/Server control panel by clicking Start > Control Panel > RSA ACE/Server.

2. In the RSA ACE/Server control panel, click Stop to end all RSA ACE/Server processes that are running on the Appliance:

? When the Broker service stopped message appears, click OK.

? If the Broker Connections dialog box opens, click Yes.

For more information about using Remote Desktop, see the RSA SecurID Appliance Owner?s Guideon the Documentation CD.

3. Click Start > Programs > RSA ACE/Server > Database Tools > Load (or, in the C:\\ace\prog directory, double-click sdload.exe). The Database Load dialog box opens.

4. Select the Server Database box to indicate that you want to load a Server dump file.

5. In the Path of server dump file field, either specify the path for the dump file and license.rec file, or browse to their location.

6. Under server Database Load Options, select the following:

? Server dump file has a different license record than the current database

? Merge records from server dump file with records in current database

Important: RSA Security strongly recommends that you back up your current database before performing a Database Load in Merge mode. For more information about the Merge option, see the RSA ACE/Server 6.0 for Windows Installation Guide.

7. Click OK. The sdload.exe program loads the dump files into the RSA ACE/Server 6.0 database.

8. Click Close.

Note: The RSA ACE/Server UNIX machine is automatically added to the RSA Appliance as a Replica. To delete it, go to Start > Programs > RSA ACE/Server > Configuration Tools > Replication Management.

 

 

Migrating from an RSA ACE/Server on UNIX

The two central tasks involved in migrating data from an RSA ACE/Server to the RSA SecurID Appliance involve:

? Dumping the database files on the RSA ACE/Server, and

? Loading these files on the Appliance.

Dumping the Database Files from a UNIX RSA ACE/Server

1. On the RSA ACE/Server Primary, stop the aceserver by typing:

./aceserver stop

./sdconnect stop

2. Create a dump file for the Server database. Type the following:

./sddump -s

A file named sdserv.dmp is created in the current directory.

3. Using the Appliance?s Remote Desktop, create a \dump directory on the RSA Appliance. For more information about using Remote Desktop, see the RSA SecurID Appliance Owner?s Guideon the Documentation CD.

4. Copy the sdserv.dmp and license.rec files from the UNIX system running the RSA ACE/Server to the \dump directory on the Appliance. If you use ftp to transfer the files, copy them in binary mode.

Note: Do not copy these files to the C:\\ace\data directory on the RSA Appliance.

RSA Appliance now contains the dump files. You are ready to load these dump files.

Loading the UNIX Database Files from the Appliance

The process of loading database files from a UNIX ACE/Server is identical to the process of loading database files from a Windows ACE/Server. For more information, see the above section titled "Loading the RSA ACE/Server Database Files into the Appliance".

Legacy Article IDa28040

Attachments

    Outcomes