CA Risk Authentication Administration Guide › Managing Global Configurations › Managing Global Rule Configurations › Uploading Rule List Data › Migrating to Production

Migrating to Production

CA Risk Authentication is shipped with default settings for the following rules and configurations:

• Trusted IP Address and Aggregators
• Untrusted IP Address
• Negative Country List
• Exception User
• Unknown User
• Device MFP Not Match
• User Velocity
• Unknown DeviceID
• User Not Associated with DeviceID
• Device Velocity
• Zone Hopping
• Miscellaneous Rule Configurations
• Scoring

In addition, you can also configure:

• New rules
• Callouts

When the data related to the preceding lists is configured, it is referred to as Proposed data. This data can be created over a period of time by using several administrative sessions. While you configure this data, it is stored in the Proposed Configuration area and is reflected in the Proposed column on respective configuration page. As a result, any changes that you make to the Proposed column affect this data.

When all data is configured according to your requirements, then the Proposed data can be converted to Active data (the Active column on respective configuration page) by migrating it to production and refreshing the CA Risk Authentication Server cache. See "arrfclient: Server Refresh and Shutdown Tool" tool for more information.

Note: At any point in time, CA Risk Authentication Servers work with Active data configurations only.

After the Proposed data has been migrated to Active data, if you configure the data again, a copy of the Active data is created in the Proposed configuration area. Further additions or deletions can be done to the Proposed data until configurations are ready to be migrated to production. All modifications are reflected only in the Proposed data. However, Reports can be viewed as Active or Proposed configurations.

Note: Active data is versioned to keep track of the changes made to the CA Risk Authentication configuration data. Every time the Proposed data is migrated to production, unique data versions are created for the new set of Active configuration data.

To migrate changes from Proposed configuration area to the Active data area:

1. Ensure that you are logged in as a GA or as an OA.
2. Activate the Services and Server Configurations tab.
3. Under the Migrate to Production section on the side-bar menu, click the Migrate to Production link.

   The Migrate to Production page appears.

4. On the page, either:
   • Select the Select All Rulesets option, if you want to migrate all the changes that you made to all the configured rulesets.

     or

   • Select a specific ruleset from the Select Ruleset(s) list to migrate the changes that you made to this ruleset.
5. Click Migrate.

   The page to confirm the action is displayed.

6. On the confirmation page, click Confirm to start the migration process.

   Note: Based on the volume of data that you are migrating to production, the migration process might take a few minutes.

   After the migration is completed, the "The proposed data has been successfully migrated to Production." message is displayed.

7. Refresh the CA Risk Authentication Server cache. See "Refreshing the Cache" for instructions on how to do this.