Moving the Data Center Security Server Manager to a new server

book

Article ID: 211674

calendar_today

Updated On:

Products

Data Center Security Server Advanced

Issue/Introduction

If you need to move the DCS Manager to another server, this document will walk you through how to do that safely.

Environment

Data Center Security Server Advanced

Resolution

Confirm the following before moving your DCS Manager:
-Is the IP of the manager changing?
-Is the FQDN changing?
(If these are changing, you'll need to push out new agent-certs and possibly import a new UMC cert)

1. Make a backup of the DCS Manager files, and the Database, as noted in the following KB article.
https://knowledge.broadcom.com/external/article?legacyId=TECH218063 

2. Install a Tomcat Only Manager on the server you are moving the Manager to.
https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/data-center-security-%28dcs%29/6-9/installing-management-server-along-with-tomcat-usi-v118312383-d3608e122103.html

3. Change the registry key from Tomcat only to Production
https://knowledge.broadcom.com/external/article?articleId=161229

4. Create new agent-cert.ssl if necessary and point your agents to the new manager.

sisipsconfig -host MGTSERVER1,MGTSERVER2
sisipsconfig -h MGTSERVER1,MGTSERVER2

You can use the Data Center Security Server Certificate utility to create a new agent-cert.ssl
https://knowledge.broadcom.com/external/article?articleId=170379