SecurID® Knowledge Base
Find answers to your questions and identify resolutions for known issues with knowledge base articles written by SecurID experts.
Article Number
000029555
Applies To
| RSA Product Set | SecurID |
| RSA Product/Service Type | RSA Authentication Manager |
| RSA Version/Condition | 8.1 SP1 |
| Platform | SUSE Enterprise Linux |
| Platform (Other) | |
| O/S Version | 11 SP3 |
| Product Name | |
| Product Description | SecurID Appliance |
Issue
What process can export the authentication manage 6.1 token data for migration in to an RSA Authentication Manager 8.1 deployment?
Resolution
To migrate any data from RSA Authentication Manager 6.1 to RSA Authentication Manager 8.1 an administrator would use the RSA Authentication Manager Database Dump program (sddump utility located in the ACEPROG folder; where ACEPROG is by default C:\Program Files\RSA Security\RSA Authentication Manager\prog on Windows platforms or /opt/rsa/ace/prog on UNIX platforms).
RSA Authentication Manager 6.1 has the capability that an administrator can only export token data with associated user information using RSA Authentication Manager Host Mode | Remote Mode > Token > Export Token… option. Unchecking the Include users associated with export tokens will only put token data into the DMP file.
Example:
Image description
..this export process will generate a server database DMP file which is encrypted with the security block stored in the license record (license.rec) of the RSA Authentication Manager 6.1 primary. There is only token data or where the export option is selected, minimal user information with the user's associated PIN in the server database DMP file.
This means you will need the server database DMP file and license.rec to migrate the 6.1 token and user data into RSA Authentication Manager 8.1 via the Operations Console.
Example; migration of 6.1 server database into the 8.1 Operations Console:
Image description
Relevant documentation is RSA Authentication Manager 6.1 to 8.1 Migration Guide (requires access to RSA SecurCare Online)
RSA Authentication Manager 6.1 has the capability that an administrator can only export token data with associated user information using RSA Authentication Manager Host Mode | Remote Mode > Token > Export Token… option. Unchecking the Include users associated with export tokens will only put token data into the DMP file.
Example:
Image description..this export process will generate a server database DMP file which is encrypted with the security block stored in the license record (license.rec) of the RSA Authentication Manager 6.1 primary. There is only token data or where the export option is selected, minimal user information with the user's associated PIN in the server database DMP file.
This means you will need the server database DMP file and license.rec to migrate the 6.1 token and user data into RSA Authentication Manager 8.1 via the Operations Console.
Example; migration of 6.1 server database into the 8.1 Operations Console:
Image descriptionRelevant documentation is RSA Authentication Manager 6.1 to 8.1 Migration Guide (requires access to RSA SecurCare Online)
Notes
Bear in mind that the 6.1 to 8.1 migration process does not overwrite existing data in the 8.1 database. You may want to take a backup of an minimal 8.1 database prior to migration testing.
In this article
