AnsweredAssumed Answered

Best way to completely duplicate a CA DIRECTORY dsa

Question asked by fmoro on Jul 31, 2017
Latest reply on Mar 30, 2018 by murbr07


we are planning to migrate our policy server 12.52 to 12.7 in Windows 2012.

Due that we'll do an in-place migration, we'll upgrade all objects that are working (policy store, policy server, webagent). For this reason, to be sure, we are adopting snapshots of the virtual machines.

In any case, we prefer to duplicate our current policy store dsa, so that we can safetly work without create any error in the previous dsa.

It is not clear what is the best way to create a completely copy of a dsa.


Let's say,

we have:

SERVER 1: policy server 12.52 and policy store CA DIR with one dsa1 (key store+policy store embedded).

1. We'd like to clone the current dsa1 to dsa2 (on the same server)

2. Then we point policy server to dsa2.

3. Now we can upgrade policy server and policy store.

4. In case of failure, we can point again to dsa1.


So, the question is: what is the best way to perform the point 1?