Chapter 6: Upgrade and Migration
Migrating from V5 appliances to V6x00 appliances
DSM Installation and Configuration Guide
Copyright 2009 - 2020 Thales Group. All rights reserved.
116
WARNING: Changing network ip address may disconnect your session and will require the
server software to be restarted.
Continue? (yes|no)[no]:yes
DHCP operations may take some time, please wait....
SUCCESS: Please restart server software to pick up the changes.
0005:network$
4. To configure a
bond0
interface using DHCP, enable DHCP on that interface. The
bond0
interface inherits the IP
address that was dynamically assigned to the
eth0
interface when the DSM was initially deployed.
Migrating from V5 appliances to V6x00 appliances
The V5800 with HSM appliances do not support DSM v6.0 or later. If you want to start using DSM v6.0 or later, on a
DSM with HSM appliance, you must purchase the V6100 appliance. This platform change is called a migration. A
V5800 appliance without HSM can be upgraded to DSM v6.0 or later, follow the procedure described here,
.
The high-level steps to migrate from a V5800 hardware appliances to V6x00 hardware appliances are described here:
1. Backup your DSM configuration to ensure you have a copy of the latest configuration before starting the
migration. You will need a wrapper key to create the backup, create one if you have not already done so. Make
sure you export the wrapper key or wrapper key shares used to create the backup. The wrapper key is required to
restore the backup. See
"Backup current DSM configuration" on page 114
for detailed procedures.
2. Turn off the old hardware appliance and take it off the network. You must turn off the old DSM hardware appliance
and remove it from the network, before you restore the DSM to the new hardware appliance, otherwise any
registered agents will try and communicate with both the old DSM and the new DSM and cause conflicts in your
system.
3. Configure the V6x00 appliance as described in the installation chapter for your product.
4. Assign the new V6x00 appliance with the same IP address and the FQDN of the initial V5 appliance from which
you are migrating.
5. Run the
security genca
CLI command on the new appliance.
6. Import the wrapper key shares to the new V6x00 appliance.
7. Restore the backed up DSM configuration to the new V6x00 appliance.
Restore backup
1. Log on to the Management Console as an administrator of type System Administrator or All.
2. Import the wrapper keys used to create the backup. Select
System > Wrapper Keys
from the menu bar.
3. Select
Import
from the Operation pull-down menu and click
Add
.
4. If you have created key shares from the wrapper key, get the key shares from the custodians and paste a key
share value into the
Key Share
text field and click
Ok
. Repeat this for each administrator selected as a key
custodian. A key share must be imported for at least as many custodians as were specified by the
Minimum
Number of Custodians
value when the wrapper key was exported.
5. Click
Apply
to finish importing the wrapper key.
6. Restore the backup file. Select
System > Backup and Restore
from the menu bar. Select the
Restore
tab.
7. Click
Browse
to locate and select the backup file to restore. Click
Ok
. The restored file uploads and the DSM
disconnects from the Management Console.
