How to register existing CCS managers to a new or reinstalled Application server

Products

• Control Compliance Suite
• Control Compliance Suite Standards Database
• Control Compliance Suite Standards Server

Issue/Introduction

In the event of a new or re-installed CCS Application Server is deployed, possibly for disaster recovery, below are the steps to remove the certificate from on App server on a CCS Manager and add the certificate of the new Application server.

Also if a CCS Manager's certificate become corrupt, the steps below demonstrate how the old certificate can be removed and a new one created and applied to the manager.

Environment

CCS 12.6.x

CCS 12.7

Resolution

The process to register a CCS Manager to a new Application Server is simple and requires a new certificate to be issued from the Certificate Management console in the new CCS installation.  Follow these steps to move the CCS Manager:

1. Unregister the CCS Manager from the 'old' Application Server.
   1. In Settings > Deployment View, select Infrastructure Tasks > Unregister CCS Manager.
   2. In the Unregister dialog, check the CCS Manager you wish to remove. Click Next.  Check the acknowledge checkbox and click Finish.
      
      
2. Create a new certificate for the CCS Manager in the 'new' CCS installation.
   1. On the Application Server, Click Start > Symantec Corporation > Certificate Management Console.
   2. In Certificate Management Console select Create Certificates.
   3. Choose Service Type: CCS Manager and complete the other fields including the NetBIOS/FQDN for the CCS Manager machine being moved to the new Application Server. Make note of the destination folder as this is where the new certificate will be created.
      
      
3. Copy the *.p12 Certificate to the CCS Manager. Place it in an easily accessible directory locally on the CCS Manager.
   
   
4. On the CCS Manager, launch a command prompt (as Administrator) and browse to the SymCert directory, typically at C:\Program Files (x86)\Symantec\CCS\Reporting and Analytics\SymCert\. run the command:

   SymCert command=Install file="<path_to\new_certificate>.p12" type=1 password=<password> DeleteExistingCert=true pause=true 

   NOTE: The password may be omitted from the command in order for the user to be prompted for it.
   
   
5. On the Production CCS Console, go to Settings > Deployment View, select Infrastructure Tasks > Register CCS Manager.
   1. In the Register a new CCS Manager dialog, check the CCS Manager and click Next.
   2. Select the CCS Site to associate with the CCS Manager and click Next.
   3. Select the Roles that the CCS Manager will have. Select the Data sources that the new manager will access and click Next.
   4. Click Finish and Finish. The CCS Manager should now be working with the 'new' CCS installation.

The steps above can be repeated for any other CCS Managers that must be moved to a different Application Server.