How to minimize outage time when converting from a standalone to a clustered RSA Identity Governance and Lifecycle deployment
Originally Published: 2018-03-02
Article Number
Applies To
RSA Version/Condition: 7.0.1, 7.0.2
Issue
- v7.0.1: RSA Identity Governance and Lifecycle 7.0.1 - Configuring WildFly Clustering
- v7.0.2: RSA Identity Governance and Lifecycle 7.0.2 - Configuring WildFly Clustering
To simplify fallback plans, you may consider setting up a new clustered environment, rather than converting the existing standalone deployment "in place". A method for doing so is, at a high level:
- Build a new standalone environment.
- Put the old standalone environment into maintenance mode, to stop all activities on it.
- Export the old standalone's database
- Shutdown the old standalone environment as it will only be needed as a fallback option should the clustering attempt fail
- Import the old standalone database into the new standalone environment
- Convert the new standalone environment to clustered, as described in the above published RSA documentation for your version
- If the clustering fails, you can fallback to the standalone environment. Meanwhile, keep the clustered environment "as is" for troubleshooting.
- At the end of each of the above Configure Wildfly Clustering documents is a "Troubleshooting" section. If you are having difficulty converting to a clustered architecture, see if that section helps. Of course, contact RSA Support if you need assistance.
Resolution
- Build a new standalone environment.
- Convert the new standalone environment to clustered, as described in the documents in the Issue section above, and confirm it is generally operative with an "empty" database.
- Put the old standalone environment into maintenance mode, to stop all activities on it.
- Export the old standalone's database
- Import the old standalone database into the new clustered environment: Follow the instructions in the Database Setup and Management Guide for your version, chapter 3, section "Importing AVUSER Schema/Data for a Customer-Supplied Database Restoration/Load". Make sure you do the "Validate Compatibility of the Database Import" steps. The Guides are:
- After importing, the following environment information will need to be adjusted. To fix that:
- Delete * from T_SERVER_NODES and the new nodes will register themselves.
- Create new AFX and remote agent server certificates as required. Ensure AFX and remote agents are configured to communicate with the new cluster.
- When all is working in the clustered environment, shutdown the old standalone environment.
- If the clustering fails, you can fallback to the standalone environment. Meanwhile, keep the clustered environment "as is" for troubleshooting.
- Contact RSA Support if you need assistance to troubleshoot.
Notes
Related Articles
After a power outage ACE/Server is not authenticating nor will it start properly 22Number of Views Primary does not communicate with replica. Activity monitor does not show messages. 54Number of Views Authentication Manager database services do not to start after power outage 179Number of Views Monitoring page performance issues in RSA Identity Governance and Lifecycle 67Number of Views Workflow editor pop-up "An error occurred communicating with the server" in RSA Identity Governance and Lifecycle 174Number of Views
Trending Articles
Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory RSA Announces Critical Security Updates for RSA ID Plus Components - RSA Authentication Manager and RSA Identity Router RSA MFA Agent 9.0 for PAM - Installation and Configuration Guide for Oracle Linux RHEL Ubuntu CentOS and Rocky Linux Explanation of successful authentication followed by passcode reuse and bad tokencode messages in RSA Authentication Manag… Quick Setup Guide - FIDO
Don't see what you're looking for?