Symantec Access Management

Expand all | Collapse all

CA SSO : Policy Store Upgrade

Jump to Best Answer
  • 1.  CA SSO : Policy Store Upgrade

    Posted 05-21-2018 09:53 AM

    Hi all,

     

    Is it possible to run Siteminder Policy Servers on both the upgraded version (e.g. 12.6) and the older version (e.g. 12.5) of Policy Stores in a fail-over mode.

     

    The upgraded 12.6 policy servers should primarily point to the 12.6 store and should fail-over to the 12.5 store in case of issues with the 12.6 stores.

     

    Can the same be configured using the Data tab in management console by specifying the respective 12.6 and 12.5 Store IPs ?

    Please suggest.

     

    Regards,

    Anurag



  • 2.  Re: CA SSO : Policy Store Upgrade

    Posted 05-21-2018 10:08 AM

    Hi Anurag,

     

    No - Its not a supported configuration . 

     

    Regards,

    Leo Joseph.



  • 3.  Re: CA SSO : Policy Store Upgrade

    Posted 05-21-2018 11:03 AM

    Hi Leo,

     

    Is there any other way or a better approach that both versions of store could be run in parallel/failover ?

     

    Regards,

    Anurag



  • 4.  Re: CA SSO : Policy Store Upgrade
    Best Answer

    Posted 05-21-2018 11:11 AM

    Policy server version needs to always match Policy store version. There isn’t any exception to this.


    Why would you want to use old policy store as failover store? Could you not just create another instance of new policy store as failover?


    If you want to run old and new policy store in parallel , you will need to have corresponding version of Policy server pointing to it and use common key store. But with this approach as there wont be any policy store synchronization between old and new policy store , this should be used only temporarily during migration.



  • 5.  Re: CA SSO : Policy Store Upgrade

    Posted 05-24-2018 05:29 AM

    We were looking for different possibilities as to mitigate the risks involved during the migration phase. Your suggestions are helpful, thanks!

     

    Regards,

    Anurag