Attachmate Worldwide  |   Contact Us  |   NetIQ.com
Home » Support » Solution Library

Technical Notes

Migration and Upgrade to Reflection for Secure IT Windows Server 7.0
Technical Note 2283
Last Reviewed 01-Feb-2008
Applies To
Reflection for Secure IT Windows Server version 7.0
Summary

This technical note describes how to migrate Reflection for Secure IT Windows Server 6.x (or F-Secure SSH Server for Windows) to Reflection for Secure IT Windows Server version 7.0.

Migrating to Reflection for Secure IT Windows Server 7.0

You can install Reflection for Secure IT Windows Server on systems with a running F-Secure server or Reflection for Secure IT version 6.x. (You can have both products installed on the same system at the same time, and both can be running if each product listens on a unique port.) Reflection for Secure IT automatically migrates your current identity (host key and certificates) and settings. Your existing key and configuration files are not changed.

Key Location

Existing host keys (hostkey and hostkey.pub by default) are copied to the new key location, so you don't need to make any changes to clients that are configured to trust your current host key.

Windows Vista: \ProgramData\Attachmate\RSecureServer
Windows XP/Windows 2003: \Documents and Settings\All Users\Application Data\Attachmate\RSecureServer

Configuration File

Settings in your existing sshd2_config file are migrated to the new xml configuration file.

Windows Vista: \ProgramData\Attachmate\RSecureServer\rsshd_config.xml
Windows XP/Windows 2003: \Documents and Settings\All Users\Application Data\Attachmate\RSecureServer\rsshd_config.xml

For information about how to read the xml server settings file, see Technical Note 2289.

Migration Log File

Migration information is saved to the migration log file.

Windows Vista: \ProgramData\Attachmate\RSecureServer\Logs\Migration.log
Windows XP/Windows 2003: \Documents and Settings\All Users\Application Data\Attachmate\RSecureServer\Logs\Migration.log

Password Cache File

If you used a password cache, cached passwords are migrated to the new password cache file.

Windows Vista: \ProgramData\Attachmate\RSecureServer\RSIT_Cache
Windows XP/Windows 2003: \Documents and Settings\All Users\Application Data\Attachmate\RSecureServer\RSIT_Cache

This migration occurs the first time you:

  • Start the server console—this triggers the migration of keys and settings without automatically starting the server.

-or-

  • Restart Windows—this triggers the migration and automatically starts the server using the migrated key and settings.

Note: If you have an existing xml settings file, the server will not migrate the settings from a previous version settings file. This enables you to configure a single settings file and install it onto multiple servers.

Migration Example

While testing, you can leave your older product installed and listening on default port 22, install the new product and use port 2222. When testing is complete, shut down the old product and change the port in Reflection for Secure IT 7.0 to 22. Migration of settings occurs one time, during installation. Note: Any changes that you make to the old product while testing and/or running both at the same time will not be carried forward to the new product.

Additional Resources

Migrated Settings: When you install Reflection for Secure IT on systems with an F-Secure server or a version of the Reflection for Secure IT server prior to 7.0, supported settings are migrated to the new xml configuration file. See the "Table of Migrated Settings" topic in the Reflection for Secure IT User Guide for a summary of which settings are supported and how settings are migrated to the newer XML format: http://docs.attachmate.com/reflection/rsit-ssh/7.0/winserver/en/help/migrated_settings_rf.htm

Reflection for Secure IT Documentation is available on the Attachmate Support site at http://support.attachmate.com/manuals/sshdocs.html.

Related Technical Notes
2273 New Features in Reflection for Secure IT Windows Server 7.0 and Release Notes
2289 Reflection for Secure IT Windows Server 7.0 Settings

Did this technical note answer your question?

Yes    No    Somewhat     Not sure yet

Additional comments about this tech note:

Need further help? For technical support, please contact Support.