{"id":37,"date":"2007-06-28T23:05:41","date_gmt":"2007-06-28T23:05:41","guid":{"rendered":"https:\/\/www.wapshere.com\/missmiis\/?p=37"},"modified":"2023-01-16T05:54:22","modified_gmt":"2023-01-16T05:54:22","slug":"replicating-miis-to-another-server","status":"publish","type":"post","link":"https:\/\/www.wapshere.com\/missmiis\/replicating-miis-to-another-server","title":{"rendered":"Replicating MIIS To Another Server"},"content":{"rendered":"<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">Here&#8217;s a really, <em>really<\/em>\u00a0useful trick. You can copy the MicrosoftIdentityIntegrationServer database to another server, run miisactivate, and, within no time at all, have an exact replica of your live server.<\/span><\/span><\/p>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">Let me just spell this out &#8211; not only will you have all your MAs, your Metaverse fully populated, and your Connector Spaces fully populated; you will <em>also<\/em> have your complete Extensions folder, as MIIS stores a copy of it within the database, and dumps it out at service startup!<\/span><\/span><\/p>\n<p><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">There are a couple of changes you must make first, but once you have it really is that simple.<\/span><\/span><\/p>\n<p><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">Firstly, this method only works if you have changed the MIIS management groups from local to domain. This is a bit tricky so will be the subject of <a href=\"https:\/\/www.wapshere.com\/missmiis\/?p=38\">another post<\/a>.<\/span><\/span><\/p>\n<p><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">Next, your second server needs a copy of the keyset.bin which you will have saved from your live installation. Copy it into the bin folder under the MIIS program directory.<\/span><\/span><\/p>\n<p><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">And that is really it. Once you&#8217;re ready the method to replicate your installation is as follows:<\/span><\/span><\/p>\n<ol>\n<li class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt; tab-stops: list 36.0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">Use SQL to backup the MicrosoftIdentityIntegrationServer database to a file on the first server, move the backup file to the second server, and restore it there.<\/span><\/span><\/li>\n<li class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt; tab-stops: list 36.0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">On the second server, run miisactivate from the MIISbin folder:<\/span><\/span><br \/>\n<blockquote>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt; tab-stops: list 36.0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">miisactivate keyset.bin <em>svcaccount<\/em> *<\/span><\/span><\/p>\n<\/blockquote>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt; tab-stops: list 36.0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">The <em>svcaccount<\/em> is the account you want the MIIS service to run as. <\/span><\/span><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">Inserting a * instead of the password will cause miisactivate to prompt you. I think this is safest if you want to put the command in a little batch file.<\/span><\/span><\/p>\n<\/li>\n<li class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt; tab-stops: list 36.0pt;\">\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt; tab-stops: list 36.0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">Miisactivate will give you a warning about the dire consequences of continuing with this if the live server is still running. This can be safely ignored, as long as you don&#8217;t intend to start running exports from this server.<\/span><\/span>\n<\/p>\n<\/li>\n<li class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt; tab-stops: list 36.0pt;\">\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt; tab-stops: list 36.0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">Miisactivate will start the MIIS service, so once it has completed you should be able to run Identity Manager straight away.<\/span><\/span><br \/>\n\u00c2<\/p>\n<\/li>\n<li class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt; tab-stops: list 36.0pt;\">\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt; tab-stops: list 36.0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">Once in Identity Manager, you may have to change some of your MA connection configs if they are pointing to the old server. However if you were clever and used <strong>localhost<\/strong> you won&#8217;t even have to do that!<\/span><\/span>\n<\/p>\n<\/li>\n<\/ol>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">If you are unable to start Identity Manager, go back and check that:<\/span><\/span><\/p>\n<ul>\n<li>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">You&#8217;re using Domain rather than Local management groups<\/span><\/span><\/p>\n<\/li>\n<li>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">The second server is a member of the same domain, or a trusted domain, as the first server;<\/span><\/span><\/p>\n<\/li>\n<li>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">The MIIS service account is a member of the MIIS_Admins group.<\/span><\/span><\/p>\n<\/li>\n<\/ul>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt;\">\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">This method is really fantastically useful for satisfying Disaster Recovery <em>and<\/em> Testing requirements at the same time. In my environment I replicate the MIIS database to the DR server every night. During the day I can use it for a test server, knowing that it will be again refreshed to an almost live state overnight.<\/span><\/span><\/p>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt;\">\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt;\">\n<p><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">See also: <a title=\"Permanent link to A DR Plan For Password Sync\" href=\"https:\/\/www.wapshere.com\/missmiis\/?p=39\" rel=\"bookmark\"><span style=\"color: #59708c; font-family: Georgia;\">A DR Plan For Password Sync<\/span><\/a><\/span><\/span><\/p>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt;\">\n","protected":false},"excerpt":{"rendered":"<p>Here&#8217;s a really, really\u00a0useful trick. You can copy the MicrosoftIdentityIntegrationServer database to another server, run miisactivate, and, within no time at all, have an exact replica of your live server. Let me just spell this out &#8211; not only will you have all your MAs, your Metaverse fully populated, and your Connector Spaces fully populated;&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":[]},"categories":[34,28,5],"tags":[],"class_list":["post-37","post","type-post","status-publish","format-standard","hentry","category-ilm2007","category-miis2003","category-sql"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pkp1o-B","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/37","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/comments?post=37"}],"version-history":[{"count":3,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/37\/revisions"}],"predecessor-version":[{"id":3333,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/37\/revisions\/3333"}],"wp:attachment":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/media?parent=37"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/categories?post=37"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/tags?post=37"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}