Are cloned environments supported for CA Identity Manager/ Virtual Appliance?

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

Question:

Are cloned environments supported, using CA Identity Manager, Provisioning Components, and Virtual Appliance (Identity Suite)?

Environment

Identity Manager
Identity Governance
Identity Portal
Virtual Appliance

Release Versions: 14.4 and 14.5

Resolution

Answer:

Cloned environments are not supported, when using any components of CA Identity Manager and Provisioning.

• This is because when the product is installed, it's encrypted with a special key that contains the hostname of the server it resides on.

 

• The CA Identity Manager password is also associated with the hostname of the server.

 

• The Provisioning Components include: Provisioning Server, Provisioning Directory, CA Directory, C++, Java Connector Server, and Connector Express.

 

• The server hostnames are embedded in many locations, including but not limited to xml files, LDAP directories, and registry keys with their respective hostname. 

Making modifications to the hostnames in these locations still may not resolve all issues that may arise in the future. Cloned machines leave a uncertainty in product sustainability. 

 

Additional Information:

 

Instead of cloning an environment, CA Support recommends that you run a parallel data migration.

 

IDM Component:

• Install and use Config Xpress, following the "Manage Configuration" section within our documentation. 

 

Provisioning Components:

• Please refer to the "Migrate the Provisioning Directory" section, under the "Upgrade Provisioning Components" chapter within the CA Identity Manager documentation.

Additional Information

Migrating Virtual Appliance can be done with the Migration Xpress utility:

Standalone or Virtual Appliance Migration Using Migration Xpress