24.2.3 Migrating Identity Server

NOTE:If you are migrating Identity Server using a new IP address, skip Step 1 to Step 5.

  1. (When using the existing IP address)Note down the IP address of Windows Identity Server.

  2. (When using the existing IP address)Remove the existing Identity Server from Administration Console on the Windows machine.

    Do not delete the Identity Server cluster as this will be used later.

    1. In Administration Console, click Devices > Identity Servers.

    2. Select the server and click Stop.

    3. Select the server > Actions > Remove from cluster.

    4. Update the cluster configuration.

  3. (When using the existing IP address)Delete Identity Server that is removed from the Identity Servers cluster.

  4. (When using the existing IP address)Switch of the Windows machine on which 4.5.x Identity Server was installed.

  5. (When using the existing IP address) On the RHEL machine, change the IP address.

    1. Go to /etc/sysconfig/network-scripts/.

    2. Open the ifcfg-Profile_1 file and change the IP address to the IP address noted in Step 1.

    3. Open the /etc/hosts file and change the IP address to the IP address noted in Step 1.

    4. Reboot the machine.

    5. SSH to the RHEL machine with the changed IP address.

  6. On the RHEL machine, download the installer file from Micro Focus Downloads, extract the tar.gz file by using the tar -xzvf <filename> command, and change to the novell-access-manager directory.

  7. At the command prompt, run ./install.sh.

  8. When prompted to install a product, specify 2, Install Identity Server, and press Enter.

    The following warning is displayed:

    Warning: If NAT is present between this machine and Administration Console, configure NAT in Administration Console.
Exit this installation if NAT is not configured in Administration Console.
Would you like to continue (y/n)?

    For information about configuring NAT, see Configuring Administration Console Behind NAT.

  9. Specify Y to proceed.

  10. Review and accept the license agreement.

  11. Verify that the required RPMs are of the latest versions. Specify Y to proceed.

  12. Specify the IP address, user ID, and password of 5.0.x Administration Console that is migrated to RHEL.

  13. Specify the IP address of Access Manager Server Communications Local Listener. Specify the local NAT IP address if local NAT is available for Identity Server.

    If the installation program rejects the credentials and IP address, ensure that the correct ports are open on both Administration Console and Identity Server.

  14. Go to the migrated Administration Console and verify whether this Identity Server is added.

  15. Restore customized files from the backup taken earlier. To restore files, add files by using Advanced File Configurator to the locations listed in the following table:

    For information about how to add files by using Advanced File Configurator, see Adding Configurations to a Cluster in the NetIQ Access Manager 5.0 Administration Guide.

    Location on Windows

    Location on RHEL

    C:\Program Files\Novell\Tomcat\conf\server.xml

    /opt/novell/nam/idp/conf/server.xml

    C:\Program Files\Novell\Tomcat\conf\web.xml

    /opt/novell/nam/idp/webapps/nidp/WEBINF/web.xml

    C:\Program Files\Novell\Tomcat\webapps\nidp\config

    /opt/novell/nam/idp/webapps/nidp/config

    C:\Program Files\Novell\Tomcat\webapps\nidp\images

    /opt/novell/nam/idp/webapps/nidp/images

    C:\Program Files\Novell\jre\lib\security\bcsLogin.conf.template

    /opt/novell/java/jre/lib/security/bcslogin.conf

    C:\Program Files\Novell\Tomcat\webapps\nidp\jsp

    /opt/novell/nam/idp/webapps/nidp/jsp

    C:\Program Files\Novell\Tomcat\webapps\nidp\WEB-INF\classes

    /opt/novell/nam/idp/webapps/nidp/WEBINF/classes

  16. Add the newly installed Identity Server to the existing Identity Servers cluster.

    For more information, see Configuring Identity Servers Clusters in the NetIQ Access Manager 5.0 Administration Guide.

    The cluster object stores all the existing Identity Server configurations. The newly added Identity Servers inherit these configurations.

  17. On the newly added Identity Server, restart Tomcat by using the /etc/init.d/novell-idp restart or systemctl restart novell-idp.service command.

  18. Repeat these steps to add other Identity Servers to the Identity Server cluster.