Migrate MDS User administrator from R77.30 to R80.20

[Rajput_Arvind]

Hi All,

We have R77.30 MDS where we have more than 500 administrators. So how can I migrate these User administrator from R77.30 to R80.20?

Thanks

[PhoneBoy]

These users should be migrated as part of migrating the entire MDS.
Are you trying to migrate these to a completely different MDS?

[Rajput_Arvind]

We are not migrating the entire MDS in one go. We have new Smart-1 Appliance. and we will set it up parallel with existing MDS. Then we will migrate one domain at a time to new MDS. In this case, how can I migrate MDS users to new MDS?

[PhoneBoy]

The users for each relevant CMA/Domain would be migrated with the domain itself.
You don't really have 500+ users defined at the global level, do you?
In any case, you can export a list of admins per this SK: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
Not sure about the import process.

[Rajput_Arvind]

Hi PhoneBoy,

We have so many Administrator created on MDS level where we have defined which administrator can access which domain. So does CMA export contain all the relevant administrator information.

[HeikoAnkenbrand · Accepted solution]

Hi @Rajput_Arvind,

As far as I know, administrators cannot be exported under R70.30 and imported under R80.20 manually.

The users are included in the database in R80.x.

Just an idea!

With this method all admin users will be added to R80.x MDS server:

1. Run mds_setup to export all MDS and CMA databases on R77.30
   # ./mds_setup
2. Enter 4 when this menu shows:

   (4) Export current Multi-Domain Server

3.  Import all CMA's and MDS on R80.x LAB server under VMWare
    $MDSDIR/scripts/mds_import.sh <path_exported_database>/exported_mds.DDMMYYY-HHMMSS.tgz
4. Now export all admin users via management CLI on the LAB server
   -> Here you have to create a script with the following commands:-)
   # mgmt_cli show administrators
   # mgmt_cli show administrator...
5. Import all admin user on your real server via mangement CLI
   # mgmt_cli add administrator...
   

[HeikoAnkenbrand]

With more than 500 admin users you should clean up a little bit:-)

[Lari_Luoma]

Check Point recommends upgrading the MDSM by exporting and importing the entire server. Gradual upgrade from R77.30 to R80.x supported, but not the most recommended way. 

This being said there is no way to export/import admins only. It’s manual work all together.