MS SQL Policy Stores SYNC (of two data center) procedure

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

 

We're running a Policy Server and we'd like to get the procedure to
put in SYNC 2 MSSQL Policy Stores. 

How can we do that ?

  1. What are the changes and configuration needed at MSSQL side ?
  2. What are the configuration needed at DataBase level ?
  3. What are the configuration needed at Tables and Schema level ?
  4. Which Policy Store Instance should be initialized and configured
     during installation of Policy Server ?

Environment

 

Policy Server 12.8SP3 on RedHat 7

 

Resolution

 

For all these, as they are DataBase level configuration, we'd like you
to get in touch with Microsoft Support and consult the vendor
documentation.

We only provide documentation about creating the schema for the Policy
Store here :

  How to Configure a SQL Server Policy Store
  https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/installing/install-a-policy-server/configure-odbc-databases-as-policy-session-key-and-audit-stores/configure-an-odbc-database-as-a-policy-store/how-to-configure-a-sql-server-policy-store.html

About the 4th question, we suggest you to initialize only 1 instance
first completely, and then make the other instance replicated once you
have imported the corporate data. No need to initialize Policy Store
at each Policy Server.