Previous Topic: Configure a Separate Key Store

Next Topic: Point the Policy Server at the Policy Store

Migrate an Existing Policy Store into an LDAP Directory

Using the smobjexport and smobjimport tools, you can migrate policy store data from other types of databases into LDAP policy stores or move policy stores in one LDAP directory to another.

The following list identifies the supported migrations:

Important! Before running a SiteMinder utility or executable on Windows Server 2008, open the command line window with Administrator permissions. Open the command line window this way, even if your account has Administrator privileges. For more information, see the release notes for your SiteMinder component.

Note: The following procedure assumes you have configured a new LDAP directory as a policy store to which you will import your existing policy store.

To migrate data from one policy store to another LDAP Directory

  1. Export your existing policy store into an .smdif file by doing the following:
    1. Navigate to siteminder_home/bin
    2. Run:
      smobjexport -ofile_name -dsm_super_user_name 
      -wsuper_user_password -v
      
      file_name

      Specifies the name of the output file to which you are exporting the data.

      sm_super_user_name

      Specifies the Super User name of the SiteMinder administrator.

      super_user_password

      Specifies the password for the SiteMinder Super User.

      Example: smobjexport -opstore.smdif -d"SM Admin" -wPassword -v

      Note: If the key store exists in the policy store, use the -k option too. By default, keys are not included in the export.

  2. Run the import utility to import your old policy store into the new one:
    smobjimport -ifile_name -dsm_super_user_name -wsuper_user_password -v
    
    file_name

    Specifies the name of the file to which you exported the policy store.

    sm_super_user_name

    Specifies the Super User name of the SiteMinder administrator.

    super_user_password

    Specifies the password for the SiteMinder Super User.

    Example: smobjimport -ipstore.smdif -d"SM Admin" -wPassword -v

    Note: If the key store exists in the policy store, use the -k option.

  3. Do the following:
    1. Verify that the Policy Server is pointing to the policy store.
    2. Make sure that the key store is configured correctly.

    The policy store is configured and you can now log into the Policy Server User Interface.

More Information:

smldapsetup

Export Policy Data Using smobjexport

Import Policy Data Using smobjimport

Point the Policy Server at the Policy Store

SiteMinder Key Store Overview