How to minimize outage time when converting from a standalone to a clustered RSA Identity Governance and Lifecycle deployment
Originally Published: 2018-03-02
Article Number
Applies To
RSA Version/Condition: 7.0.1, 7.0.2
Issue
- v7.0.1: RSA Identity Governance and Lifecycle 7.0.1 - Configuring WildFly Clustering
- v7.0.2: RSA Identity Governance and Lifecycle 7.0.2 - Configuring WildFly Clustering
To simplify fallback plans, you may consider setting up a new clustered environment, rather than converting the existing standalone deployment "in place". A method for doing so is, at a high level:
- Build a new standalone environment.
- Put the old standalone environment into maintenance mode, to stop all activities on it.
- Export the old standalone's database
- Shutdown the old standalone environment as it will only be needed as a fallback option should the clustering attempt fail
- Import the old standalone database into the new standalone environment
- Convert the new standalone environment to clustered, as described in the above published RSA documentation for your version
- If the clustering fails, you can fallback to the standalone environment. Meanwhile, keep the clustered environment "as is" for troubleshooting.
- At the end of each of the above Configure Wildfly Clustering documents is a "Troubleshooting" section. If you are having difficulty converting to a clustered architecture, see if that section helps. Of course, contact RSA Support if you need assistance.
Resolution
- Build a new standalone environment.
- Convert the new standalone environment to clustered, as described in the documents in the Issue section above, and confirm it is generally operative with an "empty" database.
- Put the old standalone environment into maintenance mode, to stop all activities on it.
- Export the old standalone's database
- Import the old standalone database into the new clustered environment: Follow the instructions in the Database Setup and Management Guide for your version, chapter 3, section "Importing AVUSER Schema/Data for a Customer-Supplied Database Restoration/Load". Make sure you do the "Validate Compatibility of the Database Import" steps. The Guides are:
- After importing, the following environment information will need to be adjusted. To fix that:
- Delete * from T_SERVER_NODES and the new nodes will register themselves.
- Create new AFX and remote agent server certificates as required. Ensure AFX and remote agents are configured to communicate with the new cluster.
- When all is working in the clustered environment, shutdown the old standalone environment.
- If the clustering fails, you can fallback to the standalone environment. Meanwhile, keep the clustered environment "as is" for troubleshooting.
- Contact RSA Support if you need assistance to troubleshoot.
Notes
Related Articles
After a power outage ACE/Server is not authenticating nor will it start properly 22Number of Views Primary does not communicate with replica. Activity monitor does not show messages. 56Number of Views Workflow editor pop-up "An error occurred communicating with the server" in RSA Identity Governance and Lifecycle 174Number of Views Monitoring page performance issues in RSA Identity Governance and Lifecycle 67Number of Views Best Practices for backup and restoration of FIM configuration and secrets files 14Number of Views
Trending Articles
Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory RSA Authentication Manager 8.9 Release Notes (January 2026) RSA Governance & Lifecycle 8.0.0 Administrators Guide RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?