-
Title
Migrating One Identity Safeguard for Privileged Sessions to a new appliance -
Description
The main purpose of this knowledge base article is to help migrating an unsupported One Identity Safeguard for Priviliged Session (SPS) appliance (the N series Pyramid hardware) to a virtual appliance or the MBX T series appliance.
Please note that migrations are not handled by Technical Support. For assistance with migrations please contact Professional Services.
https://support.oneidentity.com/professional-services-product-select
-
Cause
The support of Pyramid hardware was discontinued on the 31st of March 2019.
-
Resolution
Migration is only supported if you use the same version of PSM on both the source and the destination appliances. If the versions are the same, follow the procedure below.
Please be aware that there should be no delay between the steps, they should be started right after the one before it is finished.
Step 1. Create a backup policy.Navigate to Policies > Backup & Archive/Cleanup and create a backup policy for storing the configuration and data of the source appliance. When configuring the backup, enable Send notification on all events, so that you will receive email notification when the backup is successfully completed (or failed).
Step 2. Do a full system backup.
The full backup means backing up everything from the configuration, the reports, the metadb and even the rrd files. If you have already created backup policy, navigate to Basic Settings > Management > System Backup and create a system backup. At System backup policy, select the backup policy that you have created before. Click Commit, and click Backup now. The appliance’s administrator will receive an email about the successful or failed backup.
Step 3. Create a data backup, this is required to restore on the destination appliance.
On every connection control page (for example SSH Control > Connections, select a backup policy for every Connection Policy that you will need later. To do this, navigate to the specific connection control page, select the connection policy, and select the backup policy you have created earlier at Backup policy. Click Commit. After you selected the backup policy for all connection policies that you will need, click Backup ALL on the top of the Connections page to start backing up the selected connections' data. The appliance’s administrator will receive an email about the successful or failed backup.
Step 4. Export configuration
Navigate to Basic Settings > System > Export configuration and download a configuration export.
Step 5. Stop the source appliance
You have to stop the source appliance, because the configuration import at the Welcome Wizard will use the same IP addresses on the destination appliance.
Step 6. Start destination appliance and upload the old configuration
At the Welcome Wizard > Import old configuration, browse for the configuration file that you have exported earlier at step 4. This will make the new setup easier.
Step a. You can restore the old configuration later if you have not already imported it during the Welcome Wizard page. Navigate to Basic Settings > System > Import configuration, click Choose File and browse for the configuration that you have exported earlier.
Step 7. Restore the system backup
Check the selected backup policy at Basic Settings > Management > System Backup. This should be the same as it was on the source appliance. Click Restore now and confirm.Step 8. Optional: Install license
The system backup contains the existing license, therefore it is restored during the restore process and license upload is not required.
Step 9. Restore the data
You have to go through on all used connection control pages that you have backed up before and click Restore ALL on the top of the Connections page.
Each of the steps are mandatory, so please do not skip any of them.
Please pay close attention to the order and description.
If you require assistance then please contact the Professional Services team.