Upgrade Guide › Migrating PMDs to an Advanced Policy Management Environment › How to Migrate to Advanced Policy Management › Migrate a PMDB

Migrate a PMDB

We recommend that you understand the steps you must perform at each stage of the overall migration process before you migrate a PMDB. Migrating a PMDB is only one step in the process to migrate an enterprise deployment of CA Access Control to an advanced policy management environment.

Migrating a PMDB is the final step in the process to migrate from a PMD environment to an advanced policy management environment. In the preceding steps, you:

• Installed the Enterprise Management Server
• Upgraded the PMD host to CA Access Control r12.5 or later
• Migrated an endpoint (upgraded the endpoint to CA Access Control r12.0 or later and configured advanced policy management client components)

In this step, you use CA Access Control Enterprise Management to create a policy from the rules in the PMDB, create a host group for the migrated PMDB, and join the hosts that correspond to the PMDB subscribers to this host group. You can also choose to assign the new policy to the host group.

Important! Each time you click the Next button, CA Access Control Enterprise Management completes an action in the DMS or in the PMDB. It may be difficult to undo the result of these actions.

To migrate a PMDB

1. In CA Access Control Enterprise Management, click the Policy Management tab, click the Policy sub-tab, expand the Policy tree, and click PMDB Migrate.

   The PMDB Host Login page appears.

2. Type a user name and password that is authorized to access the PMDB and the name of the PMDB that you want to migrate, and click Log In.

   Note: Specify the PMDB name in the format PMDBname@host, for example, master_pmdb@example

   The PMDB Migrate Process page appears at the General task stage.

3. Complete the following fields, and click Next:

   Name

   Defines the name of the policy. The name must be unique on the DMS (enforced) and in your enterprise (not enforced but you will not be able to deploy a policy to a host if a policy of the same name already exists).

   Description

   (Optional) Defines a business description (free text) of the policy. Use this field to record what this policy is for and any other information that helps you identify the policy.

   Policy Classes

   Specifies the classes whose rules you want to export for inclusion in the policy. If you do not specify any classes in the Selected List column, all classes are exported and included in the policy.

   Export dependent classes

   Specifies to export all the classes that are dependent on the classes that you specify in the Selected List column. If you do not select this option, CA Access Control exports only the classes that you specify in the Selected List column.

   The Policy Script task stage appears.

4. Review the exported rules and modify them as necessary, and click Next.

   CA Access Control Enterprise Management creates a policy from the rules. The Host Group task stage appears.

5. Complete the dialog and click Next, as follows:

   Host Group

   Specifies the name of the host group to add the hosts to. You can specify an existing host group or create a new host group.

   Note: When you add a host to an existing host group, CA Access Control automatically deploys to the host any policies that are assigned to the host group.

   Assign Policy

   (Optional) Specifies to assign the policy to the host group.

   Assigned Hosts

   Specifies the hosts to add to the host group.

   Note: By default, this table contains all subscribers of the migrated PMDB that you have authority to access. You can add and remove hosts from the Assigned Hosts list; however, you cannot add a host to the host group if you do not have authority to access the host.

   CA Access Control Enterprise Management adds the hosts to the hosts group and, if specified, assigns the policy to the host group. The PMD Options task stage appears.

6. Select any of the following options that you want to apply to the migrated PMDB:

   Unsubscribe the hosts that you specified in step 3 (Host Group step)

   Specifies to unsubscribe the endpoints that you selected in the previous task stage from the migrated PMDB.

   Unsubscribe all of the PMDB subscribers

   Specifies to unsubscribe all subscribers from the migrated PMDB.

   Delete the PMD

   Specifies to delete the migrated PMDB.

   Important! Do not delete the PMDB if you use it to propagate user password commands.

   Add PMD filter file

   Specifies to add a filter file to the migrated PMDB so that the PMDB only propagates user password commands to its subscribers. If you select this option, the migrated PMDB becomes a password PMDB.

7. Click Next.

   CA Access Control performs the actions that you specified. The Migration Actions Summary task stage appears and the migration process is complete.

More information:

How Policies Are Created and Assigned

policydeploy -migrate Function—Migrate a PMD to Advanced Policy Management