Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Rajput_Arvind
Contributor
Jump to solution

Migrate MDS User administrator from R77.30 to R80.20

Hi All,

We have R77.30 MDS where we have more than 500 administrators. So how can I migrate these User administrator from R77.30 to R80.20?

Thanks

 

 

 

1 Solution

Accepted Solutions
HeikoAnkenbrand
Champion Champion
Champion

Hi @Rajput_Arvind,

As far as I know, administrators cannot be exported under R70.30 and imported under R80.20 manually.

The users are included in the database in R80.x.

Just an idea!

With this method all admin users will be added to R80.x MDS server:

  1. Run mds_setup to export all MDS and CMA databases on R77.30
    # ./mds_setup
  2. Enter 4 when this menu shows:

    (4) Export current Multi-Domain Server

  3.  Import all CMA's and MDS on R80.x LAB server under VMWare
     $MDSDIR/scripts/mds_import.sh <path_exported_database>/exported_mds.DDMMYYY-HHMMSS.tgz
  4. Now export all admin users via management CLI on the LAB server
    -> Here you have to create a script with the following commands:-)
    # mgmt_cli show administrators

    # mgmt_cli show administrator...
  5. Import all admin user on your real server via mangement CLI
    # mgmt_cli add administrator...
➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips

View solution in original post

7 Replies
PhoneBoy
Admin
Admin
These users should be migrated as part of migrating the entire MDS.
Are you trying to migrate these to a completely different MDS?
Rajput_Arvind
Contributor
We are not migrating the entire MDS in one go. We have new Smart-1 Appliance. and we will set it up parallel with existing MDS. Then we will migrate one domain at a time to new MDS. In this case, how can I migrate MDS users to new MDS?
0 Kudos
PhoneBoy
Admin
Admin
The users for each relevant CMA/Domain would be migrated with the domain itself.
You don't really have 500+ users defined at the global level, do you?
In any case, you can export a list of admins per this SK: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
Not sure about the import process.
Rajput_Arvind
Contributor
Hi PhoneBoy,

We have so many Administrator created on MDS level where we have defined which administrator can access which domain. So does CMA export contain all the relevant administrator information.
0 Kudos
HeikoAnkenbrand
Champion Champion
Champion

Hi @Rajput_Arvind,

As far as I know, administrators cannot be exported under R70.30 and imported under R80.20 manually.

The users are included in the database in R80.x.

Just an idea!

With this method all admin users will be added to R80.x MDS server:

  1. Run mds_setup to export all MDS and CMA databases on R77.30
    # ./mds_setup
  2. Enter 4 when this menu shows:

    (4) Export current Multi-Domain Server

  3.  Import all CMA's and MDS on R80.x LAB server under VMWare
     $MDSDIR/scripts/mds_import.sh <path_exported_database>/exported_mds.DDMMYYY-HHMMSS.tgz
  4. Now export all admin users via management CLI on the LAB server
    -> Here you have to create a script with the following commands:-)
    # mgmt_cli show administrators

    # mgmt_cli show administrator...
  5. Import all admin user on your real server via mangement CLI
    # mgmt_cli add administrator...
➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
HeikoAnkenbrand
Champion Champion
Champion

With more than 500 admin users you should clean up a little bit:-)

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
0 Kudos
Lari_Luoma
Ambassador Ambassador
Ambassador

Check Point recommends upgrading the MDSM by exporting and importing the entire server. Gradual upgrade from R77.30 to R80.x supported, but not the most recommended way. 

This being said there is no way to export/import admins only. It’s manual work all together. 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events