Shavlik Protect. Migration Tool User s Guide

Transcription

1 Shavlik Prtect Migratin Tl User s Guide

2 Cpyright and Trademarks Cpyright Cpyright LANDESK Sftware, Inc. All rights reserved. This prduct is prtected by cpyright and intellectual prperty laws in the United States and ther cuntries as well as by internatinal treaties. N part f this dcument may be reprduced r retransmitted in any frm r by any means electrnic, mechanical, r therwise, including phtcpying and recrding fr any purpse ther than the purchaser s persnal use withut written permissin f LANDESK Sftware, Inc. Trademarks LANDESK and Shavlik are registered trademarks r trademarks f LANDESK Sftware, Inc. in the United States and ther jurisdictins. All ther marks and names mentined herein may be trademarks f their respective cmpanies. All ther trademarks, tradenames, r images mentined herein belng t their respective wners. Dcument Infrmatin and Print Histry Dcument number: N/A Date Versin Descriptin January 2014 Initial release f this dc Initial release f the Shavlik Prtect Migratin Tl User s Guide. April 2014 Rev A Update this dcument s it applies t bth Shavlik Prtect 9.0 and 9.1. September 2015 Rev B Updated fr Shavlik Prtect Shavlik Prtect 9.2 Migratin Tl User s Guide

3 Welcme WELCOME Purpse f this Guide Overview This dcument describes hw t use the Migratin Tl t migrate yur existing Shavlik Prtect cnsle t a new machine. During the migratin, the versin and build number f Shavlik Prtect that is n yur target cnsle must be the same as the versin and build number that is n yur existing cnsle. Fr example, yu can migrate frm versin t but nt frm t Yu can upgrade t a newer versin after yu migrate t a new machine. The Migratin Tl simplifies the migratin prcess. The tl captures cre and user data frm yur existing cnsle and rewrites it int a new Shavlik Prtect installatin. The mst cmmn reasns fr migrating a Shavlik Prtect cnsle t a new machine are: Migrate ff an perating system that is n lnger supprted by the latest versin f Shavlik Prtect Migrate ff an perating system that has been marked fr end-f-life (Windws XP, Windws Server 2003, etc.) Migrate frm a 32-bit architecture t a 64-bit architecture Migrate t better, faster hardware Requirements fr Using the Migratin Tl In rder t use the Migratin Tl yu must meet the fllwing requirements: Yur existing cnsle must be at Shavlik Prtect 9.0, Patch 1 r later (Fr Shavlik Prtect 9.0, Patch 1 nly) Bth the existing cnsle and the target cnsle must cntain this Micrsft.NET Framewrk 4.0 patch: The Micrsft SQL Server versin used by the new cnsle must be equal t r later than the current versin Fr example, yu can mve frm SQL Server 2008 t SQL Server 2012 but yu cannt mve frm SQL Server 2012 t SQL Server The target machine must be using ne f the fllwing 64-bit perating systems: Windws Server 2012 Family R2, excluding Server Cre Windws Server 2012 Family, excluding Server Cre Windws Server 2008 Family R2 SP1 r later, excluding Server Cre Windws 8.1 r later, excluding Windws RT Windws 7 SP1 r later, Prfessinal, Enterprise, r Ultimate Editin Shavlik Prtect 9.2 Migratin Tl User s Guide 3

4 Welcme Yu must have 20 GB r mre free disk space t hld the backup archive files The backup archive file can be written t either the lcal hard drive r t a netwrk drive. The Migratin Tl requires a certain amunt f temprary disk space during the backup prcess. If the hard drive n yur existing Shavlik Prtect cnsle is nearly full, yu may need t change the lcatin f yur System Temp flder. Fr infrmatin n hw t d this, see the Shavlik Cmmunity Site: Cmmnly Asked Questins Q: What cre cmpnents are migrated by the Migratin Tl? Agent plicies Backgrund tasks Certificates Credentials Custm patch XML files Custm PwerShell scripts that have been imprted int the database Database (lcal nly) Distributin servers (remte nly) Files referenced by the Machine Grup link t file feature Grups (machine, patch, service packs) License activatin in a nn-prxied nline envirnment Glbal and user settings defined n the Tls > Optins dialg Patch stre if cntained n a lcal drive (up t 10 GB f data and data that is nt mre than 90 days ld) Results (scan results, deplyment results, etc.) Scheduled tasks fr the Shavlik Scheduler (the Micrsft Scheduler is nt supprted by the Migratin Tl) Templates Sme user-specific ptins Ntificatins & Warnings: Display the file size cnfirmatin dialg befre dwnlading Scans: Default Patch Scan Template, Use nly the brwse list, Use replacement patches Deplyment: Default Deplyment Template 4 Shavlik Prtect 9.2 Migratin Tl User s Guide

5 Welcme Q: What is nt migrated by the Migratin Tl? See the sectin titled Pst-Migratin Tasks fr a detailed explanatin n hw t manually manage the items that are nt migrated by the tl. An agent running n the lcal cnsle Data rllup cnfiguratin Share infrmatin fr a distributin server that resides n the lcal cnsle Prxy cnfiguratins Patch stre data beynd the 10 GB limit r lder than 90 days ITScript run files (the files that cntain utput infrmatin related t the executin f a script) Scheduled deplyments Any user-specific ptin nt identified in the What is migrated list Q: When shuld yu perfrm the migratin? Sn after the cmpletin f yur regularly scheduled patch cycle t give yurself time t cmplete the migratin. Q: Hw lng will it take t perfrm the migratin? Simple cnfiguratins can be migrated in as little as 60 minutes Advanced cnfiguratins may require a few days f lead time t prepare fr the migratin and a few hurs r days after the migratin t perfrm system verificatin steps Q: Wh shuld perfrm the migratin? Any administratr with a Shavlik Prtect accunt can perfrm the cre backup and restre. Accunt data fr the administratr currently lgged n t the cnsle machine is included in the cre backup. Each additinal administratr with a Shavlik Prtect user accunt must perfrm a separate User backup and restre. Nte: Yu cannt restre multiple users under the same lgged in accunt, and yu cannt restre a user using a different accunt. Q: I use a remte database, hw is that affected? The remte database will nt be mved but the cnnectins t the remte database will be restred during the cre cmpnent restratin prcess. Yu will restre yur user accunt data using the nrmal prcess. Shavlik Prtect 9.2 Migratin Tl User s Guide 5

6 Welcme Q: Hw lng shuld I maintain my ld cnsle? If yu are nt using agents, yu can retire yur ld cnsle as sn as the migratin t the new cnsle is cmplete. If yu are using agents, yu shuld cntinue t run the ld cnsle in parallel until all f yur agents have checked in with the new cnsle. See the sectin titled Befre Yu Begin fr additinal infrmatin. Q: Why isn t Windws 8 a supprted perating system n the target cnsle but Windws 8.1 is supprted? It has t d with a limitatin in the PwerShell versin supprted n Windws 8. The PwerShell limitatin des nt meet the minimum requirements fr running Shavlik Prtect 9.1. Windws 8.1 des nt have the PwerShell limitatin and meets the Shavlik Prtect 9.1 minimum requirements. Befre Yu Begin Read thrugh this entire sectin befre using the Migratin Tl. Target Cnsle Machine Cnsideratins The machine yu are migrating t must: Cntain ne f the five apprved Windws perating systems listed in the Requirements sectin earlier in this dcument Have Shavlik Prtect 9.0, Patch 1 r later installed The versin f Shavlik Prtect that is n yur target cnsle must be equal t r later than the versin n yur existing cnsle. Yu d nt need t activate r cnfigure anything n the newly installed (target) Prtect cnsle. The migratin tl will prvide all f that infrmatin during the restre prcess. Nt be an active cnsle The restre prcess will verwrite any data that exists n the new Shavlik Prtect cnsle machine. If Yu are Using Agents Cnsle Alias List Imprtant! Perfrm this step as far in advance f the migratin as pssible. The Cnsle Alias list n the existing cnsle must be updated with the hst name, IP address, FQDN, etc. f the new target cnsle. This is dne s yur agents will knw t use the new cnsle fr their check-ins when the existing cnsle is turned ff and becmes unavailable. Use the Tls > Cnsle alias editr menu t update the alias list. Yu shuld update the Cnsle Alias list as far in advance f the migratin as pssible. This is s the agents will have time t check in with the existing cnsle and retrieve the updated Cnsle Alias list. A gd rule f thumb is t update the Cnsle Alias list several check-in perids prir t the actual migratin. 6 Shavlik Prtect 9.2 Migratin Tl User s Guide

7 Welcme Imprtant! Any agents that d nt check in with the ld cnsle and receive an updated alias list will be stranded when the ld cnsle is turned ff. Tip: Yu will avid stranding any agents if yu are using Shavlik Prtect Clud synchrnizatin as a fallback failver destinatin. If fr sme reasn the agents cannt lcate the new cnsle, if yu have enabled the use f Shavlik Prtect Clud synchrnizatin in the agent plicy (see the Help system fr details), the agents will have the ability t check in with the clud. Shavlik Prtect Clud Synchrnizatin If yu are using Shavlik Prtect Clud synchrnizatin, perfrm a full update by selecting Tls > Operatins > Prtect Clud Sync and then clicking Frce full update nw. This will ensure that the agent plicy data cntained n the clud service is up t date. Upgrading t a Mre Current Versin f SQL Server If yu want t upgrade t a mre current versin f SQL Server during this migratin and yu are using: A lcal SQL Server Express Editin: N actins are required (d nt preinstall any versin f SQL Server). The mst current supprted versin f SQL Server Express Editin will be installed autmatically when yu install Shavlik Prtect. A lcal Full Editin f SQL Server: Install the desired editin f SQL Server n the new cnsle machine BEFORE yu install Shavlik Prtect. During the installatin f Shavlik Prtect yu will pint t the new lcal SQL Server instance. SQL Server n a remte server: T perfrm the upgrade: 1. Install the desired editin f SQL Server n the remte server. 2. Backup yur current Shavlik Prtect database and restre t the new SQL Server. 3. Use the Database Setup Tl t pint all instances f Shavlik Prtect t the new instance. T access the Database Setup Tl: Start > All Prgrams > Shavlik Prtect > Database Setup Tl. 4. Run the migratin. Nte: Yu can upgrade yur remte SQL Server editin after the migratin if yu prefer but the recmmendatin is t d it befre the migratin. Shavlik Prtect 9.2 Migratin Tl User s Guide 7

8 Welcme Create a Backup f Yur Database Befre Using the Migratin Tl This is strictly a precautin but a smart ne. If yu are using an express editin f SQL Server, yu can use the Database Maintenance tl within Shavlik Prtect t create the backup. If yu are using a full editin f SQL Server, yu shuld use the SQL Server Maintenance Plan Wizard t setup yur maintenance plans as this wizard is mre rbust and prvides additinal functinality. Use the fllwing link fr infrmatin n using the wizard t implement yur maintenance plan: Recrd Yur Current License Infrmatin Select Help > Abut Shavlik Prtect and recrd yur current license key data and prduct capabilities. Yu will use this infrmatin after the migratin is cmplete t verify that yur license infrmatin was prperly migrated. If Yu Have Scheduled Patch Deplyments Yu shuld wait fr the scheduled patch deplyments t cmplete befre yu begin the migratin. If a scheduled deplyment des ccur after yu begin the migratin, the new cnsle will nt receive the deplyment results. 8 Shavlik Prtect 9.2 Migratin Tl User s Guide

9 Welcme Hw t Access the Migratin Tl If Yu are On a Shavlik Prtect 9.0, Patch 1 Cnsle Nte: Befre yu begin, make sure the required Micrsft.NET Framewrk 4.0 patch ( is installed n the cnsle machine. T dwnlad and install the Migratin Tl: 1. Using a Web brwser, g t: 2. Click the Shavlik Prtect Sftware Supprt Dwnlads link. 3. Click the Dwnlad Shavlik Cnsle Migratin Tl link and save the PrtectBackup.zip file t yur cnsle s lcal hard drive. 4. Extract the cntents f the PrtectBackup.zip file t a flder n yur Shavlik Prtect cnsle. 5. Start Windws PwerShell. Yu can d this a few different ways: Click Start, type PwerShell, and then click Windws PwerShell, r At a cmmand prmpt, type PwerShell, r Yu can als right-click the file named Install-PrtectBackup.ps1 and select Run with PwerShell, but because this ptin des nt allw yu t set yur executin plicy befre running the script, nly use this ptin if yu are certain yur plicy is already set t RemteSigned. The ther issue with this ptin is that the PwerShell cmmand line dialg will be hidden when the Migratin Tl is started and yu may nt ntice if a PwerShell errr ccurs. 6. Set yur executin plicy by typing this cmmand: Set-ExecutinPlicy RemteSigned 7. Launch the Migratin Tl by running the PwerShell script file named Install-PrtectBackup.ps1 (must be Run as Administratr). Yu must specify the cmplete file path when running the PwerShell script. Example: If yu extracted the script file t C:\Scripts, at the PwerShell prmpt yu wuld type: C:\Scripts\Install-PrtectBackup.ps1 Nte: All f the flders and files that yu extracted frm the PrtectBackup.zip file are required t successfully launch the Migratin Tl. Yu cannt mve the Install-PrtectBackup.ps1 file t a different flder and run it withut mving all f the supprting flders and files. The Migratin Tl is started. In additin, the Migratin Tl User s Guide (this dcument) is pened in Micrsft Wrd, Ntepad, r whatever prgram is used n yur machine t view RTF files. Shavlik Prtect 9.2 Migratin Tl User s Guide 9

10 Welcme If Yu are On a Shavlik Prtect 9.1 r Later Cnsle Select Start > All Prgrams > Shavlik Prtect > Migratin Tl. T view help infrmatin, press F1 r click the Help icn ( ). Yu can als find the Migratin Tl Guide (the guide yu are reading nw) nline at: 10 Shavlik Prtect 9.2 Migratin Tl User s Guide

11 Creating Yur Backup Files CREATING YOUR BACKUP FILES Yu must first create a backup cntainer fr yur cre cmpnents. Accunt data fr the user currently lgged n is included in the cre backup. A backup must als be perfrmed fr each additinal user accunt. S, the backup prcess is: 1. Backup yur cre cmpnents. 2. Backup each additinal user accunt. The backups f the additinal user accunts can happen after yu perfrm a restre f the cre cmpnents, but if the ther administratrs are available, the recmmendatin is t have them lg n and perfrm their user accunt backups immediately after the cre backup. Backing Up Yur Cre Cmpnents This sectin prvides step-by-step instructins fr backing up the cre cmpnents f yur current Shavlik Prtect cnsle. See the Cmmnly Asked Questins sectin fr the list f cre cmpnents. Nte: Make sure that yur lcal r netwrk drive cntains enugh free space t stre the backup archive file. T be safe yu shuld have 20 GB r mre free space. 1. Clse Shavlik Prtect. 2. Launch the Migratin Tl. See the previus sectin fr instructins n hw t access and launch the Migratin Tl. 3. Select Backup. 4. Select Cre mde. This specifies that all f Shavlik Prtect s cre cmpnents will be saved t a backup archive file. In additin, the data fr the user currently lgged n t the cnsle machine will be saved t the archive file. 5. (Optinal) If yu want t change the default lcatin and name fr the Backup archive file name, click the brwse buttn and chse a new lcatin. Yu can als type directly in the Backup archive file name bx t specify a new lcatin and/r name. The file must cntain the.bak extensin. 6. Secure the backup file by typing and cnfirming a passphrase. The passphrase will be used during the restre prcess. The data is stred in a secure cntainer and can nly be accessed by prviding the crrect passphrase. 7. Click Backup cre settings. The Migratin Tl will shw status messages as it backs up the cre cmpnents. 8. Wait fr the cnfirmatin message that indicates the backup was successful, and then prceed t the next sectin fr instructins n backing up yur user data. Shavlik Prtect 9.2 Migratin Tl User s Guide 11

12 Creating Yur Backup Files Backing Up Yur User Data The recmmendatin is t backup all yur remaining user accunts immediately fllwing yur cre backup. If ne r mre administratrs are nt available, hwever, they can backup and restre their user accunts at a later date. Keep in mind, hwever, that yur existing cnsle cannt be turned ff until all user accunts are backed up. In additin, if a Shavlik Prtect administratr des nt backup their accunt and restre it n the new cnsle befre their regularly scheduled tasks are executed, thse tasks will be executed n the ld cnsle rather than the new cnsle. T avid these issues, all Shavlik Prtect user accunts shuld be backed up and restred in a timely manner. 1. If needed, launch the Migratin Tl. See the previus sectin fr instructins n hw t access and launch the Migratin Tl. 2. Select Backup. 3. Select User mde. Will back up all Shavlik Prtect data assciated with the user currently lgged n t the cnsle machine. 4. Type a lcatin and name fr the user s backup archive file. Make sure t specify a name that uniquely identifies the user. Yu can als use the brwse buttn t specify the lcatin and file name. 5. Secure the backup file by typing and cnfirming a passphrase. The passphrase will be used during the restre prcess. 6. Click Backup settings. The Migratin Tl will shw status messages as it backs up the user data. A cnfirmatin message will indicate when the user backup is cmplete. Repeat this sectin fr each user accunt. Clse the Migratin Tl when yu are finished. 12 Shavlik Prtect 9.2 Migratin Tl User s Guide

13 Restring Yur Cnsle n a New Machine RESTORING YOUR CONSOLE ON A NEW MACHINE The restre prcess is: 1. Restre yur cre cmpnents n the new cnsle and begin running verificatin tests. 2. Restre all remaining user accunts n the new cnsle. Restring Cre Cmpnents Imprtant! The restre prcess will verwrite any data that exists n the new Shavlik Prtect cnsle machine. 1. (Applies nly t Shavlik Prtect 9.0, Patch 1 cnsles) Make sure the required Micrsft.NET Framewrk 4.0 patch ( is installed n the new cnsle machine. 2. Lg n t the new cnsle machine using the same user accunt that was used t create the cre backup file. 3. Install Shavlik Prtect n yur new machine. The versin f Shavlik Prtect that yu install must be equal t r later than the versin n yur ld cnsle machine.yu d nt need t activate yur license n the new cnsle r perfrm any cnfiguratin steps; this will be dne when yu perfrm the restre. 4. Clse Shavlik Prtect. 5. (Cnditinal) If yur rganizatin uses a prxy server, make sure the prxy cnfiguratin is crrect n the new cnsle machine befre yu restre the cre cmpnents. 6. (Optinal) Mve the cre backup file frm yur ld cnsle machine t yur new cnsle machine. This is dne t imprve speed, perfrmance and stability during the restratin prcess. The backup file can, hwever, reside n an accessible lcatin n yur netwrk. 7. Install and start the Migratin Tl n the new cnsle machine. See the sectin titled Hw t Access the Migratin Tl. 8. Restre the cre cmpnents. a. Select Restre. b. Select Cre. c. Specify the cre backup file. d. Click Restre cre settings. Shavlik Prtect 9.2 Migratin Tl User s Guide 13

14 Restring Yur Cnsle n a New Machine e. Watch the prgress messages and wait fr the cmpletin message t appear. f. Check the Restre Results file fr any errr messages. 9. Start Shavlik Prtect. An infrmatinal dialg may appear that reminds yu t add the fully qualified name f the new machine t the cnsle alias list. See the Verficatin Checklist sectin fr mre details. 10. On the ld cnsle, stp the Shavlik Prtect Cnsle Service. Restring User Accunt Data Nte: Yu cannt restre user data until after yu have cmpleted the cre migratin. 1. Lg n t the new cnsle machine using the same user accunt that was used t create the user backup file. 2. (Optinal) Mve the user backup file frm yur ld cnsle machine t yur new cnsle machine. This is dne t imprve speed, perfrmance and stability during the restratin prcess. The backup file can, hwever, reside n an accessible lcatin n yur netwrk. 3. Install and start the Migratin Tl n the new cnsle machine. See the sectin titled Hw t Access the Migratin Tl. 4. Select Restre. 5. Select User. 6. Specify a user backup file. 7. Click Restre user settings. 8. Watch the prgress messages and wait fr the cmpletin message t appear. 9. Repeat this prcess fr all Shavlik Prtect administratr accunts. 14 Shavlik Prtect 9.2 Migratin Tl User s Guide

15 Pst-Migratin Tasks POST-MIGRATION TASKS In rder t cmplete the migratin, yu must perfrm the fllwing tasks n the new Shavlik Prtect cnsle. The sner yu perfrm these tasks the sner yu can permanently retire yur ld cnsle. Yu want t retire yur ld cnsle as sn as pssible t eliminate duplicate and time-cnsuming tasks frm being perfrmed by bth cnsles. Manually Migrating Items Nt Mved by the Tl If yu are in a prxy envirnment r a discnnected envirnment: The Shavlik Prtect license is nt autmatically activated in these envirnments. T activate yur license, frm the Shavlik Prtect menu select Help > Enter/refresh license key. If yu had an agent running n the lcal cnsle: This agent will nt be migrated and must be reinstalled after the migratin. If yu are using custm patch XML files: Custm patch XML files must be mved manually because they are saved t a lcatin that cannt be referenced by the Migratin Tl If yu are using a data rllup cnfiguratin and yu just migrated t: Shavlik Prtect 9.0 and 9.1 Rllup (central) cnsle: After the migratin, yu must exprt a new data rllup file and then imprt the new file n each remte cnsle. Remte cnsle: After the migratin, yu must imprt the new data rllup file. Shavlik Prtect 9.2 Rllup (central) cnsle: After the migratin, g t Tls > Operatins > Data Rllup and cnfirm that Accept and imprt results frm a rllup sender is enabled. Remte cnsle: After the migratin, g t Tls > Operatins > Data Rllup, cnfirm the rllup server infrmatin and then click Register. If yu are using a distributin server that resides n the lcal cnsle: The distributin server cnfiguratin and the files cntained n the distributin server will be mved. The flder representing the distributin server, hwever, must still be defined as a shared flder, the Windws permissins t access the shared flder must be updated, and the path t the flder must be updated in the distributin server cnfiguratin n the new cnsle. If yu were using custmized user-specific ptins: G t Tls > Optins and reset any custm setting that was nt migrated. Shavlik Prtect 9.2 Migratin Tl User s Guide 15

16 Pst-Migratin Tasks Verificatin Checklist Perfrm the tasks in this checklist t verify that yur new Shavlik Prtect cnsle is perating prperly. Select Help > Refresh files and make sure n errrs ccur. Select Help > Abut Shavlik Prtect and verify that yur license key data is valid and that the crrect prduct capabilities are enabled. Run a scan and a patch deplyment t verify that yur credentials can access the machines in yur machine grups. Dwnlad a patch and verify that the dwnlad is successful. If yu are cnfigured t use the Database Maintenance feature, select Tls > Operatins > Database Maintenance and click Run nw t verify that the feature is wrking prperly. If yu are using agents, check that they have all checked in with the new cnsle. Yu can d this frm Machine View by using the Has an Agent Plicy filter and then srting by the Last Agent Check In clumn. All check-in dates shuld be after the date yu mdified the Cnsle Alias list n the ld cnsle. If yu have enabled the use f Shavlik Prtect Clud synchrnizatin in an agent plicy yu must register the new cnsle and frce a full update. T d this, select Tls > Operatins > Prtect Clud Sync and click This cnsle is registered (the text n the buttn in this case is misleading because it is referring t the ld cnsle). When the registratin is cmplete, click Frce full update nw. If yu are using the distributin server synchrnizatin feature, verify that it succeeds the first time it is scheduled t execute. If yu have multiple cnsles and are using data rllup, check that the rllup succeeds n the prper schedule. If yu have scheduled tasks such as patch scans r patch deplyments, watch clsely the first time thrugh t make sure the tasks are successfully cmpleted. Use the Tls > Cnsle alias editr menu t remve the ld cnsle s infrmatin frm the Cnsle Alias list. Als, if the new cnsle is n a dmainjined machine, yu will need t add the fully qualified name f the new machine t the alias list. 16 Shavlik Prtect 9.2 Migratin Tl User s Guide

17 Pst-Migratin Tasks When and Hw t Retire Yur Old Cnsle Yu can retire yur ld cnsle when the migratin is cmplete and all f yur agents are successfully checking in with the new cnsle. The recmmended steps are: 1. Verify that the Shavlik Prtect Cnsle Service is stpped n the ld cnsle. This will effectively disable the ld cnsle and rute all traffic t the new cnsle. 2. G thrugh ne r mre maintenance cycles. D this t verify that everything is wrking prperly n the new cnsle. 3. Retire the ld cnsle. Hw exactly yu retire the cnsle is up t yu and yur rganizatin s plicies. Yu might simply pwer ff the machine, r yu might perfrm a backup and then uninstall Shavlik Prtect. Shavlik Prtect 9.2 Migratin Tl User s Guide 17