Performing Component-Specific Procedures

Identity Server Installed with the Failed Primary Administration Console

If you had installed an Identity Server installed with your failed primary Administration Console, you need to clean up the configuration database to remove references to this Identity Server.

  1. Log in to Administration Console.

  2. Remove Identity Server:

    1. Click Devices > Identity Servers.

    2. Select Identity Server that was installed with the primary Administration Console.

    3. Remove it from the cluster, then delete it.

Third Administration Console

If you installed a third Administration Console used for failover, you must manually perform the following steps on that server:

  1. Modify the vcdn.conf file.

    For information about how to modify a file, see Modifying Configurations.

  2. In the file, look for the line that is similar to the following:

    <vcdnPrimaryAddress>10.1.1.1</vcdnPrimaryAddress>

    In this line, 10.1.1.1 represents the failed primary Administration Console IP address.

  3. Change this IP address to the IP address of the new primary Administration Console.

Access Gateway Appliance

For each Access Gateway Appliance imported into Administration Console, edit the settings.properties file on Access Gateway if the primary Administration Console was not configured as the Audit Server. The settings.properties file is required for JCC Communication between devices and Administration Console.

If the primary Administration Console was configured as an Audit Server, you must update the IP address of the new primary Administration Console in the Auditing page.

When the Primary Administration Console Was Not Configured as the Audit Server

  1. At Access Gateway Appliance, log in as the root user.

  2. Open a terminal window and shut down all services by entering the following command:

    /etc/init.d/novell-appliance stop

  3. Edit the settings.properties file:

    1. Enter: vi /opt/novell/devman/jcc/conf/runtime/settings.properties

    2. Change the IP address in the remotemgmtip list from the IP address of the failed Administration Console to the address of the new primary Administration Console.

    3. Enter :wq! to save and exit.

  4. At Access Gateway Appliance, start all services by entering the following commands:

    /etc/init.d/novell-appliance start

  5. (Conditional) Repeat this process for each Access Gateway that has been imported into Administration Console.

When the Primary Administration Console Was Configured as the Audit Server

  1. On the secondary Administration Console Dashboard, click Auditing.

  2. In Server Listening Address, change the IP address to the secondary Administration Console’s IP address.

  3. Click Apply > OK.

  4. (Conditional) Repeat this procedure for each Access Gateway that has been imported into Administration Console.

Access Gateway Services

For each Access Gateway Service imported into Administration Console, edit the settings.properties file on Access Gateway if the primary Administration Console was not configured as the Audit Server.

If the primary Administration Console was configured as an Audit Server, you must update the old IP address with the IP address of the new primary Administration Console.

  1. At Access Gateway Service, log in as the root or the Administrator user.

  2. Shut down all Access Gateway Services.

    /etc/init.d/novell-appliance stop OR systemctl stop novell-appliance.service

  3. (Conditional) If your audit server was on the primary Administration Console, replace the old IP address with the new primary Administration Console IP address:

    1. On the secondary Administration Console Dashboard, click Auditing.

    2. In Server Listening Address, change the IP address to the secondary Administration Console’s IP address.

    3. Click Apply > OK.

  4. Edit the settings.properties file:

    1. Change to the directory and open the file.

      /opt/novell/devman/jcc/conf/runtime

    2. Change the IP address in the remotemgmtip list from the IP address of the failed Administration Console to the address of the new primary Administration Console.

    3. Save and exit.

  5. At Access Gateway Service, start all services by entering the following command:

    /etc/init.d/novell-appliance start OR systemctl start novell-appliance.service

  6. (Conditional) Repeat this process for each Access Gateway Service that has been imported into Administration Console.

Identity Server

For each Identity Server imported into Administration Console, perform the following steps:

  1. Log in as the root user.

  2. Open a terminal window and shut down all services by entering the following commands:

    • /etc/init.d/novell-jcc stop OR systemctl stop novell-jcc.service

    • /etc/init.d/novell-idp stop OR systemctl stop novell-idp.service

  3. Edit the settings.properties file:

    1. Enter vi /opt/novell/devman/jcc/conf/runtime/settings.properties

    2. Change the IP address in the remotemgmtip list from the IP address of the failed Administration Console to the address of the new primary Administration Console.

    3. Enter :wq! to save and exit.

  4. Start the services by entering the following commands:

    • /etc/init.d/novell-jcc start OR systemctl start novell-jcc.service

    • /etc/init.d/novell-idp start OR systemctl start novell-idp.service

Old Primary Administration Console

After the secondary console has been promoted to be the primary console, uninstall Administration Console software of the old primary Administration Console. Before uninstalling, make sure the machine is disconnected from the network. For instructions, see Uninstalling Administration Console in the NetIQ Access Manager 5.0 Installation and Upgrade Guide.

If you want to use the old primary console as a secondary console, you need to first uninstall Administration Console software. Connect the machine to the network, then reinstall the software, designating this console as a secondary console.