Symantec Privileged Access Management

Tech Tip: 12.9 Migration Considerations 

Jul 12, 2017 12:19 PM

The links below have been collected to aid the 12.9 migration planning and post-migration maintenance.

 

1) Create a copy of the Enterprise Management (ENTM) database in Oracle/SQL
https://docops.ca.com/ca-privileged-identity-manager/12-9-01/EN/upgrading/how-to-migrate-an-enterprise-management-server-deployment#HowtoMigrateanEnterpriseManagementServerDeployment-CentralDatabaseCloning
2) Stand up new ENTM and Distribution Servers on 12.9 using new servers using the FIPS key from the 12.x environment.
https://docops.ca.com/ca-privileged-identity-manager/12-9-01/EN/upgrading/how-to-migrate-an-enterprise-management-server-deployment#HowtoMigrateanEnterpriseManagementServerDeployment-InstallEnterpriseManagementServer
3) Migrate Policies to the New ENTM 
https://docops.ca.com/ca-privileged-identity-manager/12-9-01/EN/upgrading/how-to-migrate-an-enterprise-management-server-deployment#HowtoMigrateanEnterpriseManagementServerDeployment-MigratePolicies
4) Perform post-upgrade maintenance
4A- Upgrade JDK: https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC1879565.html
4B- Upgrade TIBCO on ENTM/DSes using T6DB005.caz (Open a support request to get the file)
4C- Restrict TIBCO ciphers: https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC1634029.html
4D- Update TIBO bridges.conf file: https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC1904832.html
4E- Disable RC4 ciphers in JBoss: https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC1925946.html
4F- Remove XAResource warnings: https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.tec592853.html
4G- Remove endpoint status requests: https://communities.ca.com/docs/DOC-231174686-tech-tip-how-to-remove-endpoint-status-report-ended-with-requests-from-work-list
5) Test 12.9 functionality
6) To switch endpoints to the new DH: https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC1984854.html
7) Decommission the 12.x ENTM and Distribution Servers

 

Additional Information:

How to use a caz file http://supportconnectw.ca.com/public/ca_common_docs/latest_cazipxp.asp

Statistics
0 Favorited
2 Views
0 Files
0 Shares
0 Downloads

Related Entries and Links

No Related Resource entered.