How to migrate the Policy Manager Server to the new Windows Server?

Issue:

How to move the WithSecure Policy Manager Server to the new Windows Server?

Resolution:

Follow these steps to transfer the WithSecure Policy Manager Server to a new server.

Backup the current Policy Manager database from the old server:
1. Stop the Policy Manager Server service
  - Policy Manager 15: net stop fsms
  - Policy Manager 16: net stop wspms
2. Create a backup of the following directory:
  - Policy Manager 15: C:\Program Files (x86)\F-Secure\Management Server 5\data\
  - Policy Manager 16: C:\ProgramData\WithSecure\NS\Policy Manager\Policy Manager Server\Data\
Start the Policy Manager Server service on the old server:
- Policy Manager 15: net start fsms
- Policy Manager 16: net start wspms
Install the Policy Manager Server on to the new server
Apply the back-up copy of the Policy Manager database folder to the new Policy Manager server:
1. Stop Policy Manager Server service
  - Policy Manager 15: net stop fsms
  - Policy Manager 16: net stop wspms
2. Replace the directories with the back-up versions from step:
  - Policy Manager 15: C:\Program Files (x86)\F-Secure\Management Server 5\data\
  - Policy Manager 16: C:\ProgramData\WithSecure\NS\Policy Manager\Policy Manager Server\Data\
3. Restart Policy Manager Server service:
  - Policy Manager 15: net start fsms
  - Policy Manager 16: net start wspms
Configure both, new and old, Policy Manager Server address value in the policy to point to the new Policy Manager Server:
1. Open Policy Manager Console
2. Select a host or policy domain from the domain tree
3. Go to Settings > Windows > Centralized management
4. In the Policy Manager Server address text field, type in the new Policy Manager Server address and in the respective HTTP/HTTPS text fields the designated values for these ports
5. Set the padlock icons tailing these text fields to the locked position, which will ensure to enforce the new value
6. Distribute (Ctrl+D) the new policy

Once the managed hosts have fetched the new communication settings from the old Policy Manager, they will start to communicate with the new Policy Manager Server.

Note #1: If the WithSecure clients continue communicating with the old Policy Manager Server, be sure to verify connectivity from the clients to the new Policy Manager Server's designated ports (HTTP/HTTPS).

Note #2: If the new host will preserve the DNS name of the old Policy Manager Server host and you are using that address the as main management server address, you can simply paste the H2-Database file from step 1 to the new Policy Server Manager host.

Article no: 000002290