How to RE-CREATE Policy Store manually on MSSQL

Products

• SITEMINDER
• CA Single Sign-On

Issue/Introduction

 

This is to list the steps on how to RE-CREATE Policy Store manually on MSSQL.

 

Environment

 

Policy Server 12.8.x

Policy Store : MSSQL

 

Cause

 

At times the Policy Store may not have been upgraded properly and can report error when creating objects.

 

Resolution

 

Recreate the Policy Store following the steps below.
Backup the database before performing the following so there's a way to revert.
Perform this in a testing environment first.

1. Run <siteminder>\db\SQL\sm_mssql_ps.sql
2. Run <siteminder>\xps\db\SQLServer.sql
3. smreg -su <password>
4. XPSDDInstall <siteminder>\xps\dd\SmMaster.xdd
5. XPSDDInstall <siteminder>\xps\dd\IdmSmObjects.xdd (If you integrate with IM)
6. XPSImport <siteminder>\db\smpolicy.xml -npass
7. XPSImport <siteminder>\db\default-fedobjects-config.xml -npass
8. smkeytool -importDefaultCACerts (If you want to import default CA certificates)
   
   ** Import your policy store export
   
   
9. XPSImport customerpolicyexport.xml
   
   ** Reimport smpolicy.xml
   
   
10. XPSImport <siteminder>\db\smpolicy.xml -npass (This is to ensure all new authentication scheme types are imported which could have been removed while importing customer policy store xml)

Although this procedure for MSSQL Policy Store, conceptually the steps will be the same for other Policy Stores.