Migrate the Server to a New Host

Products

• Carbon Black App Control (formerly Cb Protection)
• Carbon Black App Control

Issue/Introduction

How to migrate the App Control Server to a new host server.

Environment

• App Control Server: All Supported Versions
• Microsoft SQL Server: All Supported Versions
• Microsoft Windows Server: All Supported Versions

Resolution

1. Configure the new application server (and if necessary SQL Server) as outlined in: Tech Docs > Server > Server OER.
   • Verify the Operating Environment Requirements (OER) for SQL Server and App Control Server are each met.
   • Verify IIS configuration matches the Server OER > Web Server Platform requirements.
   • Verify all relevant OS and SQL Server patching is complete.
   • Verify all Communication & Port Requirements.
   • Verify all permissions for the Service Account.
2. Make backups & review current App Control configuration
   1. Note the current App Control Server version, and migrate to the same version.
      • It's best practice to use the same Server version for the migration.
      • If necessary, upgrade the Server separately (before or after).
   2. Confirm the Server Address as shown the Console > System Configuration > General does not need to be changed.
      • It's best practice to use the same Server Address for the migration.
      • It's best practice to use a CNAME DNS Record for the App Control Server Address.
      • Agents will use the Server Address shown for communication with the App Control Server.
      • If necessary, changing the Server Address (hostname) should be done separately (before or after).
   3. Backup the following:
      • App Control das database
      • Trusted Communication Certificate (with Private Key)
      • IIS Certificate (if different than the Communication Certificate)
3. Update CNAME DNS & power down or segment the old application server.
   1. Power down or otherwise network segment the old application server
      • Fully disabling the App Control Server and Reporter services is recommended.
      • Powering on, or otherwise making the old installation available, will cause conflicts.
   2. Update the CNAME DNS Record accordingly to send traffic from the old IP Address to the new IP Address.
4. Log in to the new application server with the App Control Service Account
   1. If also migrating SQL Server at this time: Restore the App Control das database.
   2. Install the App Control server as outlined in Tech Docs > Server > Server Installation Guide > Installing the Server with a Restored or Reconnected Database.
   3. During the install be sure to choose:
      • Use Existing Database
      • The Certificates stored in the database or the ones backed up.
5. After App Control Server is installed on the new application server
   1. Log in to the Console and confirm Agents are showing as Connected.
   2. At this time the old App Control Server installation should be removed.

Additional Information

• Architecture by Endpoint Count
• Choosing Proper Hardware for App Control Server
• Choosing Proper Hardware for the SQL Server
• Cloud Deployments
• Common Performance Pitfalls
• Validating Storage Performance