Previous Topic: Architecture ChangesNext Topic: Migrate your Provisioning Directory


Upgrade the Provisioning Directory

For the provisioning components to work with CA IdentityMinder, upgrade the Provisioning Directory schema and CA Directory.

Note: If you want to install your Provisioning Directory on a new system, migrate the Provisioning Directory instead of performing an upgrade.

When upgrading CA Directory, the installer may ask you perform one of these actions:

If you encounter either message, click Ignore and continue with the upgrade.

To upgrade the Provisioning Directory

  1. If you have primary and alternate Provisioning Directories, back up your primary Provisioning Directory.
  2. Shut down all Provisioning Directories in your environment.
  3. If you are upgrading from a release prior to CA Identity Manager r12.5, complete the following steps

    Note: If you are upgrading from CA Identity Manager r12.5 or a higher release, skip to step 4.

    Starting at CA Identity Manager r12.5, CA Directory no longer uses Ingres as a data store. Instead, a new memory-mapped file technology named DXgrid is used. Therefore, you perform these Ingres steps:

    1. Stop Ingres with the following command:
      ingstop -service
      

      The command window shows the output from the ingstop command.

    2. If you get an error, use this command:
      ingstop -kill
      
    3. Verify that all of the following Ingres processes are stopped (use the Window Task Manager or the UNIX ps command):
      • dmfacp.exe
      • dmfrcp.exe
      • iidbms.exe
      • iigcc.exe
      • iigcn.exe
      • iijdbc.exe
      • iistar.exe

        The Windows Tasks manager shows what processses are running.

    4. Restart Ingres with the following command:
      ingstart -service
      
    5. Issue the following dxserver command:
      dxserver start all
      
  4. Stop the Connector Server and Provisioning Server services.

    The Windows services dialog shows which services are running.

  5. Choose the upgrade method for the provisioning directory:
  6. Answer the question about deployment size if the Select Deployment Size screen appears in your upgrade. Consider the following guidelines, while allowing room for future growth:

    Note: If you are installing a Provisioning Directory in an established CA IdentityMinder installation, be sure to make the deployment size large enough. Otherwise, an error occurs because the data does not fit when loaded into the data files.

  7. If you are installing the Provisioning Directory in an FIPS 140-2 enabled environment, select the FIPS 140-2 Compliance mode check box during installation and provide the FIPS Key File.
  8. If you are upgrading a pre-r12.5 installation, a CA Directory Upgrade Configuration message appears:

    A message appears to provide the next steps in CA Directory upgrade.

  9. Click Finish to perform the CA Directory upgrade. Note the following:

    This dialog shows the DXmanager checkbox is cleared.

    Once the CA Directory upgrade completes, the Provisioning Directory upgrade resumes.

  10. Go through the wizard and enter the information you collected for the upgrade.

    During upgrade, you can select a check box to configure Provisioning Directory high availability. If you choose this option, you supply the hostnames of all alternate Provisioning Directories and specify the primary Provisioning Directory.

  11. When the upgrade completes, uninstall and reinstall any alternate Provisioning Directories. For more information, see the Installation Guide.

After the upgrade completes, you can find CA Directory documentation in the following locations: