idmctl create fails in IGA Xpress v15 without Provisioning Server

Products

• CA Identity Suite

Issue/Introduction

When deploying IGA Xpress v15, administrators may find that the Identity Manager (IM) Management Console (/iam/immanage) is accessible, but the Environment tab appears blank.

Attempting to run the idmctl create command to generate the out-of-the-box IM Environment results in a Traceback error:

python

IndexError: list index out of range

The failure occurs at line 217 in idmctl.py while attempting to acquire a Provisioning Server IP address.

Environment

Product: IGA Xpress
Version: 15.0
Scenario: Migration from 14.5.x to v15 in environments that do not utilize the Provisioning Server component.

Cause

The idmctl create command in IGA Xpress v15 has a dependency on the Provisioning Server service. If the service is not deployed in the cluster, the script fails to find the required node information, leading to the IndexError and preventing the creation of the default IM environment.

Resolution

For migrations from 14.5.x to v15 where a Provisioning Server is not required, it is recommended to bypass the idmctl create command by pointing the new v15 deployment to a copy of the existing 14.5.x database.

 

Recommended Migration Approach

Prepare Database: Create a backup or copy of the existing 14.5.x Identity Manager database.

Deploy v15: Perform the v15 deployment without selecting the Provisioning Server component.

Configure Database Connection: Point the v15 Identity Manager instance to the database copy created in Step 1.

Migrate Data: Use the Mogrify utility to migrate the IM Userstore information and environment settings from 14.5.x to the v15 format.

Following this approach eliminates the need for a Provisioning Server and the idmctl create command entirely.