ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

How to export global rules, policies, responses etc

book

Article ID: 44148

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) CA Single Sign-On

Issue/Introduction

Introduction:
How to export global rules, policies, responses etc without exporting the entire policy store.

Cause

Global Objects such as Global Rule, Policies, and Responses are not considered "Root objects" and cannot be exported on their own by XID. To export Global Objects, the Global Domain must be exported.

Environment

Release:

Applies to Policy Servers 12.52 through newest

Resolution

**NOTE: If this is production, please take necessary backups of the policy server/store before making any changes.  The steps below (step 9) may require restart of the policy server service.

Export Global Domain

1. Run XPSExplorer

2. Enter the number for GlobalDomain

3. Enter S to search GlobalDomain objects

4. Copy down the XID for the GlobalDomain.

The example below is the screen after step 3. (CA.SM::[email protected] is the XID):

SEARCH MENU**********************************************CA.SM::GlobalDomain

There is 1 object in the result.
  1-CA.SM::[email protected]
             (I) Name  : "03-7bdf31f2-44d7-4d7b-a8f5-5de2eaa0b634"
             (C) Desc  : "* Please do not edit this domain! This is a global domain. *"

* indicates that the object is in the XCart.

5. Enter q until XPSExplorer is exited

6. Run the command below replacing exportFileName.xml with a outfile name and XID with the value copied from step 4.

XPSExport exportFileName.xml -xo XID -npass

Example:

XPSExport globalDomainExport.xml -xo CA.SM::[email protected] -npass

 

7. Review the exportFileName.xml and check it for all the global policies, rules and responses.

Additional Information

Visit https://techdocs.broadcom.com/ > Product: CA Single Sign-On [Version] for additional documentation. 

XPSExport (12.52 SP1)

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-identity-and-access-management/single-sign-on/12-52-01/administrating/policy-server-tools/xpsexport.html

XPSImport (12.52 SP1)
https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-identity-and-access-management/single-sign-on/12-52-01/administrating/policy-server-tools/xpsimport.html