How to minimize outage time when converting from a standalone to a clustered RSA Identity Governance and Lifecycle deployment
Originally Published: 2018-03-02
Article Number
Applies To
RSA Version/Condition: 7.0.1, 7.0.2
Issue
- v7.0.1: RSA Identity Governance and Lifecycle 7.0.1 - Configuring WildFly Clustering
- v7.0.2: RSA Identity Governance and Lifecycle 7.0.2 - Configuring WildFly Clustering
To simplify fallback plans, you may consider setting up a new clustered environment, rather than converting the existing standalone deployment "in place". A method for doing so is, at a high level:
- Build a new standalone environment.
- Put the old standalone environment into maintenance mode, to stop all activities on it.
- Export the old standalone's database
- Shutdown the old standalone environment as it will only be needed as a fallback option should the clustering attempt fail
- Import the old standalone database into the new standalone environment
- Convert the new standalone environment to clustered, as described in the above published RSA documentation for your version
- If the clustering fails, you can fallback to the standalone environment. Meanwhile, keep the clustered environment "as is" for troubleshooting.
- At the end of each of the above Configure Wildfly Clustering documents is a "Troubleshooting" section. If you are having difficulty converting to a clustered architecture, see if that section helps. Of course, contact RSA Support if you need assistance.
Resolution
- Build a new standalone environment.
- Convert the new standalone environment to clustered, as described in the documents in the Issue section above, and confirm it is generally operative with an "empty" database.
- Put the old standalone environment into maintenance mode, to stop all activities on it.
- Export the old standalone's database
- Import the old standalone database into the new clustered environment: Follow the instructions in the Database Setup and Management Guide for your version, chapter 3, section "Importing AVUSER Schema/Data for a Customer-Supplied Database Restoration/Load". Make sure you do the "Validate Compatibility of the Database Import" steps. The Guides are:
- After importing, the following environment information will need to be adjusted. To fix that:
- Delete * from T_SERVER_NODES and the new nodes will register themselves.
- Create new AFX and remote agent server certificates as required. Ensure AFX and remote agents are configured to communicate with the new cluster.
- When all is working in the clustered environment, shutdown the old standalone environment.
- If the clustering fails, you can fallback to the standalone environment. Meanwhile, keep the clustered environment "as is" for troubleshooting.
- Contact RSA Support if you need assistance to troubleshoot.
Notes
Related Articles
Error: 'AttributePluginException: error encountered while trying to convert a user property: samlattr6: java.lang.IllegalA… 8Number of Views How do I convert an OID in string form into ASN.1 binary? 19Number of Views Error message "Can not convert logon name: lab\\tstuser1 to UPN error: 0" during IWA authentication in RSA Access Manager 31Number of Views Question: Can unmapped (also known as orphan) events be converted to mapped events 26Number of Views Import of an AFX connector does not show the display name of the connector in RSA Identity Governance & Lifecycle 35Number of Views
Trending Articles
RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA Release Notes for RSA Authentication Manager 8.8 RSA Authentication Manager 8.9 Release Notes (January 2026) Supported On-Demand Authentication (ODA) SMS providers for use with RSA Authentication Manager 8.x Deploying RSA Authenticator 6.2.2 for Windows Using DISM
Don't see what you're looking for?