How to RE-CREATE Policy Store manually on MSSQL?

Products

• SITEMINDER
• CA Single Sign-On

Issue/Introduction

This is to list the steps on how to RE-CREATE Policy Store manually on MSSQL.

 

Environment

Siteminder release:  12.8.xx and 12.9 (Applicable to all the supported releases)
component: Policy Server \ Policy store 
OS: Windows

 

 

 

Cause

At times the Policy Store may not have been upgraded properly and can report error when creating objects.

 

Resolution

Recreate the Policy Store following the steps below.

- Backup the database before performing the following so there's a way to revert.

- Perform this in a testing environment first.

1. Run <siteminder>\db\SQL\sm_mssql_ps.sql
2. Run <siteminder>\xps\db\SQLServer.sql
3. smreg -su <password>
4. XPSDDInstall <siteminder>\xps\dd\SmMaster.xdd
5. XPSDDInstall <siteminder>\xps\dd\IdmSmObjects.xdd (If the environment is integrate with IM)
6. XPSImport <siteminder>\db\smpolicy.xml -npass
7. XPSImport <siteminder>\db\default-fedobjects-config.xml -npass
8. smkeytool -importDefaultCACerts (If required to import default CA certificates)
   
   ** Import the policy store export
   
   
9. XPSImport customerpolicyexport.xml
   
   ** Reimport smpolicy.xml
   
   
10. XPSImport <siteminder>\db\smpolicy.xml -npass (This is to ensure all new authentication scheme types are imported which could have been removed while importing customer policy store xml)

Although this procedure is for MSSQL Policy Store, conceptually the steps will be the same for other Policy Stores.