Need to replace our current Securid Appliance with a new unit
Guys please help,we recently bought two new units to replace our current appliances,currently we have 1 x primary Securid 130 appliance and 1 x replica appliance in our DR site both run on different networks/subsets , I have replaced the replica already by taking it offline/removing it and took it out of the configuration and then just setup the new unit as a new replica...but now I need to replace the primary unit and am unsure as to how to go about it....
can I just switch off the primary and remove it from the configuration and setup anew primary ....PLEASE help and if possible list the correct steps for me to take
- appliance replace
- Community Thread
- Forum Thread
- primary and replica replace
- primary appliance replacement
- replace appliance
- RSA SecurID
- RSA SecurID Access
- Token Auth
- Token Authentication
- Token Authenticator
- Token Authenticators
You did not say what version of Authentication Manager you are running, but in general you can deploy a new replica to a primary within some range of the same version, just not between 8.2 and any previous version, e.g. 8.1 SP1. So if you have already "setup the new unit as a new replica" I assume it is a replica of the primary you want to eliminate, therefore I suggest you promote the current new replica, eliminate or remove the old primary if it was online during this promotion (promotion for maintenance) and "setup the [second] new unit as a new replica" to the recently promoted primary.
The other option is to take a backup from 1 primary and setup a new primary, then restore the backup to the new primary. But if you do this, the replica that you have already done will not attach to this new primary, you will have to factory reset it and deploy it again.
sorry was gonna say they are all up to date 8.2 and patch 2, so I will have to then promote the new replica (which is physically at our DR site) to primary then setup the other new one as a replica again? Will that have any impact on the windows authentication agents I have in place at the moment or will they just carry on working seamlessly while I am doing the work?
so yeah basically I need to replace the current Primary (old unit) with a new unit...replica has already been replaced...
Promote the DR replica, remove the old primary if it was online during the promotion, add the second new appliance as a replica, when it is all settled down, promote that one to primary so you will be where you want to be.
If you deploy the new appliance as a primary, and restore the old database to it, it may not attach the DR replica
In the morning U.S. east coast time, Ed should see this and he can comment if the DR replica might attach to the new primary after restoring the old primary database, or one of the other guys in CET time zone might see this earlier and comment. Which ever way you go, take a backup in the primary operations console and check replication status before any changes or promotions.