Scenario: To cross-migrate an IBM Security Guardium Key Lifecycle Manager Multi-Master cluster

Use this topic to migrate a Multi-Master cluster from an earlier version (source) of IBM® Security Guardium® Key Lifecycle Manager to version 4.1 (target) when the host system of the target version is different than the host system of the existing version. You need to use the cross-migration utility.

  1. Configure the new cluster.
    1. Identify servers to create the new IBM Security Guardium Key Lifecycle Manager Multi-Master cluster.
    2. Install IBM Security Guardium Key Lifecycle Manager version 4.1 on the servers that will be added to the new cluster. See Installing.
    3. Add master servers to the new cluster. See Adding a non-HADR master server to a cluster.
    4. Ensure that the new cluster is up and running. See Multi-Master cluster configuration status.
    5. Ensure that any new or incoming client device communication certificates appear as pending for acceptance to allow secure communication between the device and the server. To do so, navigate to Configuration > Key Serving Parameters page and ensure that Keep pending client device communication certificates check box is selected.
  2. Migrate data from the source cluster to the target cluster.
    Important: Plan for sufficient downtime for this step.
    1. Back up the primary master server on the source IBM Security Guardium Key Lifecycle Manager cluster.
    2. Restore the backup files on a new server and use it as the primary master server.
    For instructions, see Migrating data from an earlier version of IBM Security Guardium Key Lifecycle Manager.
  3. Configure the clients (for example, storage devices) that are using the source cluster.
    1. Configure the clients to use the new cluster.
    2. Verify that the clients are working with the new cluster.
  4. (Optional): After you ensure that the clients are able to work with new cluster, you can remove the source cluster. For instructions, see the uninstallation topic for that version in the IBM Knowledge Center. For example, to uninstall version 3.0, see Uninstallation of IBM Security Guardium Key Lifecycle Manager.
Date Change description
13 Aug 2021 Added a new configuration step (1.e).
30 Mar 2020 Initial version.