AnsweredAssumed Answered

How can I replace my current SecurID 130 appliances with new ones

Question asked by Hennie Havenga on Nov 28, 2016
Latest reply on Nov 28, 2016 by Edward Davis

Like • Show 0 Likes0
Comment • 3

Hi Guys, can anyone point me in the correct direction, we have a primary and secondary (replication partner) RSA SecurID 130 appliances both running Authentication Manager 8.2.0.2 , now both of these units are out of warrant so we purchased new ones along with new licenses etc.

How would one go to replace them, I was thinking the following way:

1. Shut down the old replication partner,

2. Setup a new unit as the new replication partner

3. Down the old primary appliance and set the new replication unit as the primary.

4. Setup another new unit and set it to the new replication partner/secondary unit.

Would it be that easy or does someone else have a better/right way of doing this?

Thanks in advance

Edward Davis

Nov 28, 2016 3:45 PM

Correct Answer

That would work fine. Your way you described is pretty easy.

It can be done another way...

Set up a new plain-vanilla primary and restore a backup from the old primary

to this new one, and then install a new replica to it. Then rename/reip them to replace the

old ones...

Whatever you think is easiest for you.

See the reply in context

No one else had this question

Outcomes

Edward Davis

Nov 28, 2016 3:45 PM

That would work fine. Your way you described is pretty easy.

It can be done another way...

Set up a new plain-vanilla primary and restore a backup from the old primary

to this new one, and then install a new replica to it. Then rename/reip them to replace the

old ones...

Whatever you think is easiest for you.

1 person found this helpful

Actions

Hennie Havenga Nov 28, 2016 4:01 PM

Ahh ok so one can do it that way also, I aim to keep the systems up all the time hence my route so at least one unit should be available all the time while I do the work.

Thanks Edward

Actions

Edward Davis

@ Hennie Havenga on Nov 28, 2016 4:16 PM

yes your way is best.

remember about promoting that replica, to become a new primary

there are two promotion scenarios

-promotion for maintenance

assumes all servers are up and running fine, and you

are flipping the roles, and the old primary will become a new replica, and no

systems that know about each other are down or planned to go down

-promotion for disaster recovery (the one you are planning)

assumes the old primary is gone, shut down or otherwise dead...and you are selecting

a replica to take it's duties and will not be trying to get the old primary connected as a replica

2 people found this helpful

Actions

3 Replies

Edward Davis Nov 28, 2016 3:45 PM
Unmark Correct
Correct Answer
That would work fine. Your way you described is pretty easy.

It can be done another way...
Set up a new plain-vanilla primary and restore a backup from the old primary
to this new one, and then install a new replica to it. Then rename/reip them to replace the
old ones...

Whatever you think is easiest for you.
1 person found this helpful
Like • Show 2 Likes2
Actions
Hennie Havenga Nov 28, 2016 4:01 PM
Mark Correct
Correct Answer
Ahh ok so one can do it that way also, I aim to keep the systems up all the time hence my route so at least one unit should be available all the time while I do the work.

Thanks Edward
Like • Show 0 Likes0
Actions
- Edward Davis @ Hennie Havenga on Nov 28, 2016 4:16 PM
  Mark Correct
  Correct Answer
  yes your way is best.
  
  remember about promoting that replica, to become a new primary
  
  there are two promotion scenarios
  
  -promotion for maintenance
  assumes all servers are up and running fine, and you
  are flipping the roles, and the old primary will become a new replica, and no
  systems that know about each other are down or planned to go down
  
  -promotion for disaster recovery (the one you are planning)
  assumes the old primary is gone, shut down or otherwise dead...and you are selecting
  a replica to take it's duties and will not be trying to get the old primary connected as a replica
  2 people found this helpful
  Like • Show 2 Likes2
  Actions

How can I replace my current SecurID 130 appliances with new ones

Outcomes

Related Content

Recommended Content