Comparing Methods for Backing Up and Restoring CA Embedded Entitlements Manager (EEM) Data

Products

• CA Service Operations Insight (SOI)

Issue/Introduction

What is the difference between the LDIF backup method and the safex XML export method for CA Embedded Entitlements Manager (EEM)?

 

CA Embedded Entitlements Manager 12.7 - Create a Backup from an Online Dump

CA Embedded Entitlements Manager 12.7 - Safex XML Export

 

Symptoms:

• Uncertainty regarding the appropriate backup strategy for EEM data.
• Questions about whether LDIF or XML (safex) provides a more comprehensive backup.

Environment

• CA Embedded Entitlements Manager (EEM) is installed and configured as part of a Broadcom product environment.
• SOI - CA Service Operations Insight (SOI)

Cause

Guidance

Resolution

 EEM supports two primary methods for data management, each serving distinct purposes:

1. Online Dump (LDIF file):
   • Purpose: Full system disaster recovery.
   • Scope: Dumps the entire CA Directory datastore.
   • Use Case: Recommended for catastrophic failure recovery where the entire EEM environment must be rebuilt or restored.
2. Safex Utility (XML file):
   • Purpose: Day-to-day object management.
   • Scope: Exports specific object types (policies, users, applications) through the EEM API.
   • Use Case: Recommended for routine backups, migration of specific applications, or deployment of policies between environments.

Important Considerations:

• If EEM is integrated with LDAP/Active Directory, global users are stored in the external directory and will not be included in either an LDIF backup or a safex export.
• Maintain the LDIF process for full system recovery requirements.
• Safex is the preferred tool for routine object-level maintenance and policy portability.