Hi all, 

currently we are using an external Oracle DB for Runtime and Configuration data (AAC/Fed). Our challenge is now that we have to migrate all our virtual appliances incl. Oracle DB from datacenter A to datacenter B. From network point of view it will be not possible to reach the appliances incl. Oracle DB between the two datacenters, so we need to build up the Oracle DB in the new datacenter from scratch. What are the supported ways now to migrate all the data from Oracle DB to the new datacenter? Maybe you had the same challenge in your business work in past and you can give you an advice. 

Thanks in advance & best regards

Thomas

------------------------------
Thomas Renner
------------------------------

Is your second IVIA installation at the second datacenter a IVIA configuration export or is it a new installation?  If it's a new installation, this gets more complicated since the IDs matching data to auth mechanisms, federations/partners, API definitions, etc. likely won't match the new installation.

If it is a config export, basically copy/paste of the IVIA environment, then a point in time backup of the DB from site A to site B should work.  Granted you'll need to do it when there is downtime for your users otherwise anyone interacting with MFA/token services is going to lose data after the point of the data export.  I've had no issues with having our DBAs dump the database contents from one DB to another, then adjusting the settings in IVIA to point to the new database.

Note, if you only need certain data, then you could potentially save yourself some headache by only exporting/importing that data.  For example, I had one use case where all I needed was the API dynamic client registrations and we were converting from one database type to another.  In that case, I created a process to dump the API client registrations (using the LMI REST API), and then register them again on the new environment.  This was because we were essentially building a new IVIA environment from scratch and the data had to be migrated, and as I mentioned initially a new IVIA build is more difficult since if the data is not created in the DB by it, the IDs won't match.  This is a pretty easy process with client registration versus say MFA enrollment data, however.

Maybe others can chime in with their experiences.