Migrating the ActivID Appliance

You can migrate to the ActivID Appliance 8.7 from an existing ActivID Appliance 8.6.

Older appliance versions must be updated to version 8.6 before migrating to version 8.7.

Planning

Migrating to ActivID Appliance 8.7 is a critical operation and must be planned appropriately to minimize downtime and/or data loss.

  • As a guideline, the full migration process takes approximately:

    • Migration from ActivID Appliance 8.6 (virtual) with Software cryptography (JCE):

      • Five domains with 2 million users, 1 million devices, and 500000 Audit Records

      • Export time - 7 minutes

      • Import time - 11 minutes

    • Migration from ActivID Appliance 8.6 (hardware) with Software cryptography (JCE):

      • Two domains with 400000 users, 100000 devices, and 14.3 million Audit Records

      • Export time - 11 minutes

      • Import time - 10 minutes

      • Note: These metrics are provided only as an indication and the actual duration may vary depending on your environment and configuration.

  • Certain configuration elements cannot be migrated.

    Review the non-migrated data and make the required backups and records so you can re-apply the configuration during Post-Migration Steps.

    Important: The ActivID Appliance administrator accounts (appadmin) and System administrator account (root) are NOT migrated. During the migration process, you must reset the passwords.

  • The seamless transition of HID Approve users from ActivID Appliance 8.6 to 8.7 requires that the 8.7 appliance(s) are publicly exposed with the same hostname and certificate as the previous 8.6 appliance(s)

    For appliances that would be directly exposed to users, the migration process migrates the TLS certificate if the new and old appliances are configured with same hostname.

Migration Overview

  1. Install the hot fix that will enable you to export the ActivID Appliance 8.6 migration package

  2. Generate and export the ActivID Appliance 8.6 migration package to an SFTP/FTP site.

  3. Install ActivID Appliance 8.7 (full installation).

  4. Import the ActivID Appliance 8.6 migration package from the SFTP/FTP site.

  5. Perform the applicable post-migration steps (re-apply non-migrated configuration).

Supported Migration Paths

ActivID ActivID Appliance 8.7 supports the following migration paths (listed by version and cryptographic configuration).

  ActivID Appliance 8.7
  ActivID Appliance 8.6   VM with software cryptography (JCE) VM with external HSM
VM with software cryptography (JCE) X  
VM with external HSM   X
Hardware with software cryptography (JCE) X  
Hardware with external HSM   X
Note: You can only migrate back-end ActivID Appliances. Migration is not supported for front-end appliances.

 

Topics in this section: