Questions and guidelines about Domain Migration

[Josh28]

Hello Mates,

I need to migrate 2 CMA (no global assignments)  from a MDS deployment composed of two VMs in HA, running R81.20, prior to upgrade them in R82(.10).

I’ve looked in details the sk about the domain migration https://support.checkpoint.com/results/sk/sk156072 , the procedure seems straightforward but I have a few questions . Here is how I see it:

• Install the new MDS in R81.20 using the same build as the old one (in our case, OS build 634)
• Install latest JHF on both deployment
• Migrate the CMA:
• Old Primary MDS: mgmt_cli export-management domain-name "domain1" file-path "/var/log/domain1_exported.tgz" --domain 'System Data' --format json
• New Primary MDS: mgmt_cli import-management file-path "/var/log/domain1_exported.tgz" --domain 'System Data' --format json
• Install the security policies from the new MDS

As my source MDS is in HA, is it mandatory for the destination MDS to be in HA as well for the migration to work ?

If I keep a HA deployment on the new MDS, is there extra steps to consider, or the export/import above will import the primary and secondary CMA ?

Thank you for your input.

[_Val_]

No, you don't need to migrate the secondary CMA in the domain. In fact, you should not do that at all.

However, I would recommend removing the secondary CMA from the original system completely to avoid any issues in the process. So the migration would look like this:

1. Back up your MDS servers and save outside of the production system in a safe place, just in case.
2. Delete the secondary CMA from the domain in question
3. Export the domain
4. Import the domain to the new system.
5. Recreate the secondary CMA to restore your MGMT HA configuration again

[ZaferGr]

Hi,

Before you begin working here, I recommend that you back up the log_export configuration, if there is one. That information will not be included during the restore process.