To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Redirecting old clients to a new FSPMS

KultisJeppe
KultisJeppe Posts: 16 Security Scout
in Business Suite

I've installed a new PMS (10.10) on a new server and gotten that working. In order to do this, I installed the FSPMC 10.10 to use it for the new server. Well, the old server is ready to be taken down now, but I forgot to distribute a policy to the clients redirecting them to the new server. This means all the clients are taking orders from the Old Server while I only have FSPMC's to connect to the New Server. 

 

Is there a way I could tell the Old Server to distribute policies with the IP-address of the New Server?

Comments

  • Jouni
    Jouni Posts: 30 Threat Terminator

    Hello KultisJeppe,

     

    In case you have the PMC installed on the old server, I would recommend you to modify the setting from there.

    Otherwise, if it's not possible to use the PMC from the same machine where the PMS is installed on, then this depends on the PMS version, as the PMS and PMC need to be the same version in order to work together.

    In case you have PMS 10.10 on the server and have the PMC 10.10 on your remote workstation, then you only need to add the old server address as an additional address to PMC's login window and connect to that one. You can then modify the new management address on the old PMS and distribute the policy.

    Additionally regarding to moving Policy Manager to another server, please see the post by Siltanen from following Community thread:
    http://community.f-secure.com/t5/Management/i-need-to-move-policy-manager-to/m-p/1947#M130

  • KultisJeppe
    KultisJeppe Posts: 16 Security Scout

    There is no PMC installed on the old server. The error window I get when trying to connect with PMC 10.10 to the Old Server PMS 10.0 lets me know the PMC isn't backwards compatible.

     

    The problem is that I don't have any old PMC's left. Not installed and not as installation packages.

     

    The only three solutions I can think of is:

    1. Edit some files by hand on the Old Server in order to distribute a new PMS IP to the clients
    2. Find an old (10.0) version of the PMC (You wouldn't happen to have a link, would you?)
    3. Run around and reinstall FSCS on every single machine

    If you have any other options, I'd gladly hear them. =)

     

    I'd like to know if it's possible to do #1 or #2, and which files to edit and how to distribute them, alternatively a link to an old 10.0 PMC, before I start running around reinstalling..

  • KultisJeppe
    KultisJeppe Posts: 16 Security Scout

    Ah, an upgrade would probably be the best solution, assuming upgrading is safe.

     

    I just download and install the RPM, right?

     

    From here: http://www.f-secure.com/en/web/business_global/support/downloads/-/carousel/view/82 ?

  • Jouni
    Jouni Posts: 30 Threat Terminator

    Hello KultisJeppe,

     

    That's right!

    It's always recommended to take a backup before any major changes:

    1) Stop the Policy Manager Server daemon
        # /etc/init.d/fspms stop

    2) Backup the folder /var/opt/f-secure/fspms/data/h2db
    3) Start the Policy Manager Server daemon
        # /etc/init.d/fpsms start

This discussion has been closed.

Categories