The RSA database is encrypted with the license record and the Primary Authentication Manager hostname and IP address are embedded in the database.
On the existing 5.2 Authentication Manager export the databases from a command prompt:
net stop sdradiusd
net stop acesrvc
net stop logmaintsvc
net stop sdadmind
net stop sdcommd
net stop syncsrvc0
net stop jsed
net start brksrv
C:
CD \ace\prog
sddumpsrv
sddumplog
net start brksrv
net start jsed
net start syncsrvc0
net start sdcommd
net start sdadmind
net start logmaintsvc
net start acesrvc
net start sdradiusd
Copy the following files to the new server in "C:\Program Files\RSA Security\Authentication Manager\legacy":
- C:\ace\prog\sdserv.dmp
- C:\ace\prog\sdlog.dmp
- C:\ace\data\license.rec
On the new server:
- Install a fresh copy of Authentication Manager 6.1
Stop Services
- Select Start | All Programs | RSA Authentication Manager Control Panel
- Select Start & Stop RSA Auth Mgr Services
- Click Stop All
- Click OK
Import Data
- Select Start | All Programs | RSA Security | RSA Authentication Database Tools | Load
- Check Server Database
- Enter C:\Program Files\RSA Security\RSA Authentication Manager\legacy\sdserv.dmp
- Check Server dump file has a different license record
- Check Merge records from server dump file
- Click OK
- Click Close
Import Logs
- Run C:\Program Files\RSA Security\RSA Authentication Manager\prog\sdnewdb.exe
- Check Log Database
- Click OK
- Click Yes
- Click OK
- Select Start | All Programs | RSA Security | RSA Authentication Database Tools | Load
- Check Log Database
- Enter C:\Program Files\RSA Security\RSA Authentication Manager\legacy\sdlog.dmp
- Click OK
- Click Close
Start Services
- Select Start | All Programs | RSA Security | RSA Authentication Manager Control Panel
- Select Start & Stop RSA Auth Mgr Services
- Click Stop All
Update sdconf.rec on Agents
- Select Start | All Programs | RSA Security | RSA Authentication Manager Host Mode
- Select Agent Host | Generate Configuration Files
- Click OK to generate a configuration file for All Agent Hosts
- Click Yes
- Copy the sdconf.rec file from C:\Program Files\RSA Security\RSA Authentication Manager\data\config_files to all Agents
To create a clean database on the Authentication Manager with an administrator and a replica defined:
- Select Start | All Programs | RSA Authentication Manager Control Panel
- Select Start & Stop RSA Auth Mgr Services
- Click Stop All
- Click OK
- Run C:\Program Files\RSA Security\RSA Authentication Manager\prog\sdnewdb.exe
- Check Log and Server databases to remove all data
- Run "C:\Program Files\RSA Security\RSA Authentication Manager\prog\sdrepmgmt add"
- Enter the hostname for "Enter system to add to replica table:"
- Accept the defaults for the remaining prompts
- Run "C:\Program Files\RSA Security\RSA Authentication Manager\prog\sdcreadm Administrator"
- Select Start | All Programs | RSA Security | RSA Authentication Manager Control Panel
- Select Start & Stop RSA Auth Mgr Services
- Click Stop All
To rename or change the IP address of the Primary Server:
Stop Services
- Select Start | All Programs | RSA Authentication Manager Control Panel
- Select Start & Stop RSA Auth Mgr Services
- Click Stop All
- Click OK
- Click Edit
- Uncheck Automatically start services on system startup
- Click OK
Update Replica
- Select Start | All Programs | RSA Security | RSA Authentication Manager | RSA Authentication Manager Configuration Tools | RSA Authentication Manager Replica Management
- Highlight the Primary Server
- Click Details
- Change the Name and or the IP addresses of the Primary ACE/Server configuration
- Click OK to the notice that you have changed the Name and now must change the system name
Update Server
- Change the name or IP address on the Primary Server Operating system, and reboot the machine
- Select Start | All Programs | RSA Security | RSA Authentication Manager | RSA Authentication Manager Configuration Tools | RSA Authentication Manager Replica Management
- Click OK to the "The name and/or IP address of this Primary RSA ACE/Server has changed successfully" dialogue
Start Services
- Select Start | All Programs | RSA Authentication Manager Control Panel
- Select Start & Stop RSA Auth Mgr Services
- Click Start All
- Click OK
- Click Edit
- Check Automatically start services on system startup
- Click OK
Other Updates
- If you have replicas and If Push DB is enabled on the Primary, copy only the ACEDATA\replica_package\license directory to all Replicas.
- If Push DB is disabled on the Primary, copy and replace the replica's ace\data\sdserv.(db, bi, vrs, lg) files with the files from the ACEDATA\replica_package\database\sdserv.* and the license files as above
- New sdconf.rec files must be generated for all agent hosts and delivered to the agent hosts, replacing the existing file