IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  How can we clone an AAC appliance

    Posted Wed February 10, 2021 09:02 AM

    I want to increase the number of ISAM AAC appliances in my environment. We currently have 2 AAC appliances on 9.0.5_IF02 and want to scale it to 4.

    Is there a quick way of cloning the existing AAC appliance and creating new ones ? If yes , will you provide a link to this documentation.

    Thanks in advance.



    #Support
    #SupportMigration
    #Verify


  • 2.  RE: How can we clone an AAC appliance

    Posted Wed February 10, 2021 09:18 AM

    Forgot to mention, Policy Server, Directory Server and runtime database is external to this appliance.



    #Support
    #SupportMigration
    #Verify


  • 3.  RE: How can we clone an AAC appliance

    Posted Wed February 10, 2021 02:31 PM

    Hi there,

    We don't really have any quick and easy "clone" function like what you're looking for. The only similar functionality that we have would be the ability to export and import a reverse proxy instance configuration. I don't know if these appliances also include the reverse proxy, you don't mention that. But if they do then you could use that for the proxy.

    https://www.ibm.com/support/knowledgecenter/SSPREK_9.0.7/com.ibm.isam.doc/admin/task/tsk_exporting_webseal_config.html

    But as far as the appliance itself it would need to be created, configured (addresses, networking, licenses), added to the cluster, and then the configuration like the runtime parameters and such configured. If this is something you need to do a lot then it could be beneficial to look at automating some or all of the processes (using rest API scripting, or even ansible if you use that).

    If you do use ansible you can look at

    https://github.com/IBM-Security/isam-ansible-roles

    but keep in mind that this ansible stuff is provided by the owner of that github, and it's not something that IBM provides official support for if you use it. You would need to debug it youself or work via the github if you need help.

    I hope this helps.

    Daniel



    #Support
    #SupportMigration
    #Verify