Manually Migrate or Move a VIP Enterprise Gateway Validation Server from one server to another

Products

• VIP Service

Issue/Introduction

Manually building the Validation Server from the VIP EG console or using the export/import feature should be used whenever creating a new validation server. If those methods fail or if the shared secret is unknown, these instructions can be used to manually copy a Validation Server from another VIP Enterprise Gateway to another and manually create the Windows service.

Resolution

The IMPORT function transforms the settings to match the target VIP EG. This manual method does not do that and requires the source and destination VIP EG server be the same major version. For example, 9.8.x to 9.8.x. 

1. Set the VIP EG console log level to DEBUG.
2. Copy the Validation Server folder(s) from the source (\VIP_Enterprise_Gateway\Validation\servers) to the same location on the VIP EG destination server. The Validation Server folders can also be extracted from a VIP EG exported .zip file. 
   
3. Navigate to the \VIP_Enterprise_Gateway\Validation\servers\<validation_server_name>.
   1. Navigate to the logs folder and delete any files.
   2. Navigate to the conf folder and edit radserv.conf:
      - Modify the server.version value to match the current version
      - Modify the server.port to be the desired port
      - Modify the server.localIP to match the IP address of the server
      - Modify the SecondFactorModule.server.0.localIP to match the IP address of the server
      - Save the file and exit notepad.
4. Restart the VIP EG service and log into the VIP EG console. The validation servers should be visible on the Validation tab.
5. Recreate the Validation Server Windows Service
   1. Open an administrator command prompt and navigate to \Symantec\VIP_Enterprise_Gateway\Validation\bin
   2. Run this command after adding the Validation Server folder name:
      

      C:\Program Files\Symantec\VIP_Enterprise_Gateway\Validation\bin>vsauthcreateserver.exe -servicename <Validation_Server_Folder_Name> -displayname "Symantec Validation Authentication Service <Validation_Server_Folder_Name>" -path "\"C:\Program Files\Symantec\VIP_Enterprise_Gateway\Validation\bin\VSValidationServer\" --config-file \"C:\Program Files\Symantec\VIP_Enterprise_Gateway\Validation\servers\<Validation_Server_Folder_Name>\confadserv.conf\""

   3. Repeat for all Validation Servers.
   4. Open the Windows Services console and confirm the service has been created. Do not start the service from here. 
   5. Log into the VIP EG console and start the Validation Server. 
   6. If the service does not start, refer to the vipegconsole.log for details
   7. If necessary, the Validation Server Windows service can be removed with this command: vsauthremoveserver.exe -servicename <Validation_Server_Folder_Name>