AM 8.1-Migration from Authentication Manager 6.1 to Authentication Manager 8.1
2 years ago
Originally Published: 2015-11-16
Article Number
000043903
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.1.0
Platform: VMware
O/S Version: ESXi 5.0
Issue
The problem is his users on 6.1 were configured on the internal database and he did a month ago test migration but during the test migration he configured users to be on LDAP connection not on internal data base and did some changes to policies and agent configuration after that they wanted to move the environment to production but the problem is that they have done some changes to there users on 6.1 and added new users gave them some tokens and want these changes to be moved to 8.1 without messing up 8.1 configuration and want them to be moved to ldap not on internal data base, and they can't do a remigration. Tried to do the delta custom migration to just move users with tokens but it failed without doing any updates to the 8.1 environment.
Resolution
so we had two options,
either do a new clean production migration and configure everything again from scratch which they refused as they wanted to move to production within hours,
The other option was a workaround and we weren't sure if it will work or no so we tried,
we did the below,
  • Did unlink to active directory connection
  • Deleted all the tokens
  • Clean up unresolvable users
  • Followed this RSA Knowledgebase Article 000029555 with clicking option including users with exported tokens
  • Took the dump and imported it in 8.1 using custom migration option
  • Imported them to the LDAP connection directly