Connector Guides › Connectors Guide › Connecting to Endpoints › RSA Authentication Manager SecurID 7.1 Connector › Connector Specific Features › RSA 6.x Connector Data Migration › What the Migration Utility Does

What the Migration Utility Does

The migration utility does the following:

• Searches for all RSA 6 account templates which are associated with the specified RSA 6 namespace. You are asked to specify a search pattern. If the search operation does not return anything, the migration utility prompts you to specify a new search pattern.
• For each account template returned by search operation, the migration utility does the following:
  • Returns all template attributes
  • Verifies that the RSA7 template with the name you specified exists
    • If the name exists, the utility prompts you for a different name
    • If you use an existing RSA7 template, the utility skips template generation and proceeds to verification and association with the specified RSA7 namespace.
• Generates a new RSA 7 template

  If a template is a local template (that is, the realm name is not specified in the RSA 6 template) the utility represents each group listed in the RSA 6 template as a local group in the RSA 7 template. For example, the group Rsa6_group is represented as the following in the RSA 7 template:
  eTDYNGroupName= rsa6_group,eTDYNContainerName=Security_Domain,…

  For example, the group Rsa6_group@site is represented as the following in the RSA 7 template:
  eTDYNGroupName= rsa6_group,eTDYNContainerName=site, eTDYNContainerName=Security_Domain,…

  Each agent host listed in RSA 6 template is represented in the RSA 7 template as a local group. For example, the agent host Agent_host.ca.com is represented in the RSA 7 template as:
  eTDYNGroupName= Agent_host,eTDYNContainerName=Security_Domain,…

  If a template is a remote template, that is, the realm name is present in the RSA 6 template, trusted group DNs are generated instead of local ones as previously shown, and the account name is represented as account % realm.

• Verifies that specified security domain exists in the RSA 7 namespace.

  If a domain cannot be found in interactive mode, the utility prompts you to provide a proper name.

• Verifies that the specified realm exists in the RSA 7 namespace, if a template is a remote template.

  In interactive mode, you are prompted to choose an existing trusted realm.

• Verifies that all RSA 7 groups (that is, groups corresponding to RSA 6 groups, and groups corresponding to RSA 6 agent hosts) exist in the RSA 7 namespace.

  If a group cannot be found in interactive mode, you are prompted to specify a proper group name. Use the following format for DNs composite names:

  Realm/SD_Level_1/SD_Level_2/…

• Creates an RSA7 template and associates it with the RSA 7 namespace.