ACS 2.4 migration to 3.x?

Hello,
Has anyone migrated from ACS 2.4 to 3.x? If not, how else can you one get data from that version into the next?
thanks!

If you can get hold of the intermediate install images such as 2.6, 3.0 etc all you'd need do is keep installing one over the other. In fact you could go 2.4 direct to 3.0 or even 3.1. Its around 3.2 or 3.3 that the installers starting getting picky about what they would upgrade from.
Remember all the group/user config can be dumped with csutil and re-imported into newer versions - but that doesnt include ACS admin config and the network config database.

Similar Messages

  • ACS 5.3 Migration Utility Failures

    I'm trying to run the migration utility to export from ACS 4.2.0(124) to an ACS 5.3 appliance, and am receiving the "
    Fatal Error !! - cannot connect to ACS 4.x DB !!" error when I run the utility on the migration machine.  The migration machine has ACS 4.2.0(124) installed and is a Windows 2008 Standard Server SP1 running as a VM.  I am logging into the server with VNC (*not* RDP) with a locally-defined administrator account.  I get these errors in migration.log when I run the utility and try to do an "analyze and export" function:
    07-26-2012 13:36:55 JavaUtils.isAttachmentSupported(JavaUtils.java:1308) WARN - Unable to find required classes (javax.activation.DataHandler and javax.mail.internet.MimeMultipart). Attachment support is disabled.
    07-26-2012 13:37:14 ACS4Connector.checkDBConnectivity(ACS4Connector.java:137)FATAL -  Fatal Error !! - cannot connect to ACS 4.x DB !!
    java.sql.SQLException: [Microsoft][ODBC Driver Manager] Data source name not found and no default driver specified
    at ianywhere.ml.jdbcodbc.IDriver.makeODBCConnection(Native Method)
    at ianywhere.ml.jdbcodbc.IDriver.connect(IDriver.java:354)
    at java.sql.DriverManager.getConnection(Unknown Source)
    at java.sql.DriverManager.getConnection(Unknown Source)
    at com.cisco.nm.acs.mgmt.migration.ACS4Connector.getConnecter(ACS4Connector.java:66)
    at com.cisco.nm.acs.mgmt.migration.ACS4Connector.checkDBConnectivity(ACS4Connector.java:133)
    at com.cisco.nm.acs.mgmt.migration.MigrationApplicationCLI.runExport(MigrationApplicationCLI.java:605)
    at com.cisco.nm.acs.mgmt.migration.MigrationApplicationCLI.main(MigrationApplicationCLI.java:266)
    Any ideas?

    Hi there,
    The migration utility doesn't work when running Windows 2008 or 64-bits machines. This is already documented:
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtn17779
    Let me know if it helps.

  • Cisco ACS to ISE Migration Tool

    HI all.
    I'm gtrying to migrate in our LAB ACS 5.3 to ISE 1.2 using the migration tool and i take this error:
    D:\migTool>migration.bat
    log4j:WARN No such property [encoding] in com.cisco.acs.positron.migration.utils.Log4jTextAreaAppender.
     INFO [main] MigrationApplicationDriver.main:56: Starting Application, in the main method......
    Exception in thread "main" org.springframework.beans.factory.BeanDefinitionStoreException: Failed to read candidate component class: file [D:\migTool\bin\com\cisco\acs\positron\migra
    tion\gui\components\treetable\JTreeTable.class]; nested exception is java.lang.ArrayIndexOutOfBoundsException: 3145
            at org.springframework.context.annotation.ClassPathScanningCandidateComponentProvider.findCandidateComponents(ClassPathScanningCandidateComponentProvider.java:237)
            at com.cisco.acs.positron.migration.MigrationApplicationDriver.main(MigrationApplicationDriver.java:61)
    Caused by: java.lang.ArrayIndexOutOfBoundsException: 3145
            at org.springframework.asm.ClassReader.readClass(Unknown Source)
            at org.springframework.asm.ClassReader.accept(Unknown Source)
            at org.springframework.asm.ClassReader.accept(Unknown Source)
            at org.springframework.core.type.classreading.SimpleMetadataReader.<init>(SimpleMetadataReader.java:54)
            at org.springframework.core.type.classreading.SimpleMetadataReaderFactory.getMetadataReader(SimpleMetadataReaderFactory.java:80)
            at org.springframework.core.type.classreading.CachingMetadataReaderFactory.getMetadataReader(CachingMetadataReaderFactory.java:82)
            at org.springframework.core.type.classreading.SimpleMetadataReaderFactory.getMetadataReader(SimpleMetadataReaderFactory.java:76)
            at org.springframework.core.type.filter.AbstractTypeHierarchyTraversingFilter.match(AbstractTypeHierarchyTraversingFilter.java:105)
            at org.springframework.core.type.filter.AbstractTypeHierarchyTraversingFilter.match(AbstractTypeHierarchyTraversingFilter.java:76)
            at org.springframework.context.annotation.ClassPathScanningCandidateComponentProvider.isCandidateComponent(ClassPathScanningCandidateComponentProvider.java:280)
            at org.springframework.context.annotation.ClassPathScanningCandidateComponentProvider.findCandidateComponents(ClassPathScanningCandidateComponentProvider.java:214)

    Migration Tool Installation Guidelines:
    http://www.cisco.com/c/en/us/td/docs/security/ise/1-1/migration_guide/ise_migration_guide/ise_mig_install.pdf

  • Cisco ACS 4.2 migration to ACS 5.4 advice

    Hello all, we are planning migrating off our ACS 4.2.0.124 ( non appliance ) to ACS 5.4. I'm looking for any advice or tips from anyone that has done the migration.
    Is the migration tool intrusive or can it be run at anytime?
    I thought about not using the migration tool and do a new install however we have a few hundred MAC address entered for a Mac authenticated SSID as well as about a 100 switches and routers for TACACS.
    We have about a half dozen WIreless Controllers that use AAA with a mix of SSID's that are doing WPA2 with Mac authentication, LEAP, and, PEAP. We also use TACACS for routers and switches and AAA for anyconnect users.
    Any advice on the migration process would be appreciated.
    Thanks,
    Dan

    Actually I managed to copy/paste from the ACS4.2 to the CSV file. The passwords will not be imported though so you have to reset the password for all users and let them change it.
    If I were you I would have use the import utility to migrate users to keep the password then I will update the information of users (including group membership) via update template CSV file.
    The migration I used before included few users that I could create on the spot and ask them to reset the password.  Most of the data were MAC addresses for MAC auth and IP addresses for TACACS+ AAA clients (switches, routers...etc).
    If you have too many users then the migration tool is your friend to get them imported without having to reset the password.
    It is also important that you read the migration guide before you use the utility. You'll find valuable information about what will be imported and how. What data will be maintained and what will not.
    HTH
    Amjad
    Rating useful replies is more useful than saying "Thank you"

  • ACS VM version migration to ISE

    Hi,
    If a customer bought ACS on VMWare (2 x LCSACS-51-VM) in the past and are interested in migrating to ISE. They would like to consider moving 1 x LCSACS-51-VM to a similar VM based image and the other to an appliance based system. Both act as a redundant pair.
    The ordering guide seems unclear on how to handle this scenario. The customer has an SAS support contract.

    Have you already gone through this guide.
    http://www.cisco.com/en/US/docs/security/ise/1.1/migration_guide/ise_mig_undst_tool.html#wp1027036
    Should you've any specific questions regarding migration from ACS 5.x to ISE 1.x, let us know.
    ~BR
    Jatin Katyal
    **Do rate helpful posts**

  • ACS to ISE migration

    Has anyone successfully migrated from ACS to ISE especially with WLAN or WiFi users?
    If you have, please share any information.

    I have done a few of those. I have never tried using the migration tool but instead have always created configurations from scratch. Basically, anything Radius related will migrate just fine. The one major thing that ISE won't support is TACACS+ but that is also coming in a future release. For more info check this doc:
    http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/migration_guide/ise_migration_guide/ise_mig_overview.html\
    Thank you for rating helpful posts!

  • ACS 4.2 to 4.2.1 Upgrade Questions

    I have been tasked to upgrade our four ACS servers from
    4.2.1.15 to the latest version.  The ACS servers are
    applianced based.  I have browsed the download software page
    of cisco.com and have found this file:
    app/Acs_4.2.1.15.11.zip (ACS SE 4.2.1.15.11 cumulative
    patch).
    Can someone confirm if this is the latest/best file to download
    the latest 4.2 release of hardware based Cisco Secure ACS?
    For those who have upgraded to this latest release, can you
    comment on your experience regarding the upgrade process or
    ACS performance post-upgrade?  Any issues/caveats about the
    process or performance post-upgrade?
    Thanks in advance for any helpful information you can
    provide for this?
    Adil

    Hi Adil
    ACS  provides a migration utility to transfer data from migration-supported  versions of ACS 4.x to any ACS 4.x machine. The ACS migration process  requires, in some cases, administrative intervention to manually resolve  data before you import it to ACS.
    The Migration utility completes the data migration process in two phases:
    •Analysis and Export
    •Import
    In  the Analysis and Export phase, you identify the objects that you want  to export into 4.x. The Migration utility analyses the objects,  consolidates the data, and exports it.
    After  the Analysis and Export phase is complete, the Migration utility  generates a report that lists any data compatibility errors, which you  can manually resolve to successfully import these objects into new ACS.
    The  Analysis and Export phase is an iterative process that you can rerun  many times to ensure that there are no errors in the data to be  imported. After you complete the Analysis and Export phase, you can run  the import phase to import data into ACS.
    For complete step by step configuration, please go through this link:
    http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.2/user/guide/common_scenarios.html

  • How to migrate multiple ACS database into one ACS database ?

    Hey All,
    we just purchased several companies and as IT/network department, we need to consolidate all the ACS from the HQ and the purchased company into one ACS,  I read the cisco docs. mentioned, I can export the migration file from the old acs and upload it into the new acs serve.
    but my concern is we have multiple acs server, will the the muliple acs migration files overwrite each other during the upload into the new server.
    thanks

    Raghavender -
    I am not an expert on MySQL migration, but you would look to migrate the database to a local Oracle Database and then move that to your Database Cloud Service.  However, keep in mind that at this time you can only access the Database Cloud Service from outside the Cloud via RESTful Web Services, so you might have to modify the application that accesses the database.  Hope this helps.
    - Rick Greenwald

  • ACS migration from 4.1.1.23 to 5.6

    Dear Team.
    We need to upgrade an ACS 4.1.1.23 to a new ACS 5.6. This means a data migration from ACS 4.1.1.24 to 5.6
    The migration guide says that the migration utility must be run on a 4.1.1.24 to check the DB integrity and make some modifications.
    Our client has an ACS 4.1.1.23.
    In the Cisco Download page for ACS 4.1.1.24 there isn't any acumulative patch to 4.1.1.24. Anyone has any idea how we can upgrade the ACS 4.1.1.23 to .24?
    After this patch will be applied, we will backup data from 4.1.1.24 to migration server 4.1.1.24 with demo license (this file exist on Download Center)
    Thanks.

    You can upgrade to 4.2 and then to 5.6
     ACS 4.2 with the recovery DVD, no need to upgrade to ACS 4.1.1.24 and then to 4.2.
    Remember to make a backup before the upgrade.
    There is a feature that allows you to restore any ACS 4.1 backup into ACS 4.2.
    "Before you begin any upgrade procedure, we recommend that you back up your existing data and configuration. When, upgrading do a re-image of ACS 4.2 and then restore the ACS 4.1 configuration."
    http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/solution_engine/upgap.html#wp1120037
    http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-6/user/guide/acsuserguide/migrate.html#pgfId-1057975

  • ACS 5.3 to ISE 1.2 Migration

    Hi Experts,
    Good Day!
    I really need help I already did some troubleshooting but the issue I'm encountering still exists.
    I am trying to migrate my ACS 5.3 to ISE 1.2 using the migration tool. I;m able to extract the data from ACS however, when I tried to import it in the ISE it shows me always the error in the attached file. It is using FQDN to detect the ISE however, I don't have any DNS server to translate my ISE IP to FQDN.
    Please help.
    Thank you.
    niks

    Migration Tool Installation Guidelines:
    http://www.cisco.com/c/en/us/td/docs/security/ise/1-1/migration_guide/ise_migration_guide/ise_mig_install.pdf

  • ACS 5.4 to ISE 1.2 migration

    Hi,
    does somebody have an idea how to migrate users from ACS 5.4 to ISE?
    I tried with migtool, but it's telling me that migration from ACS 5.4 is not supported.
    However if I install older ACS 5.1 and restore a backup from ACS 5.4 then it fail because it doesn't match installed application.
    I don't want to use backup from older ACS as we put since that time so many users ...
    Thanks for any hint.
    Karel

    Hi Karel,
    As I see this is not supported so far. What you can do is to export your users from 5.4 and import them on 5.3 then proceed with the backup and migration process.
    If you still need to go with 5.4 you better communicate the TAC. They may help you better (they may probably have a patch to fix the issue with the migration from 5.4 to ISE).
    HTH
    Amjad
    Rating useful replies is more useful than saying "Thank you"

  • What's the migration path from ACS v3.3 to ACS v5.1?

    It's a standalone appliance 1112 running on ACS v3.3, how to migrate to another standalone appliance 1120 with ACS v5.1?
    Does CISCO have any documents about this?
    I remember I used to read an article about how to build a temp ACS v4.2 windows to help this kind of migration, could anyone help to send the doc link to me?

    Your basic assumption is correct. There needs to be a two stage process where first migrate to ACS 4.2 on Windows and then from there perform migration to ACS 5.0/5.1.
    When ordering ACS 5.0/ACS 5.1 the disk set includes all the software required to perform this upgrade.
    Going from from 4.2 to ACS 5.0/5.1 is migration; not upgrade; since need this reads a subset of the data items from ACS 4.2 and creates them on ACS 5.0/ACS5.1. This includes the bulk objects such as devices and internal users. However, the policy configuration on ACS 5.1 needs to be performed manually since follows a very different concept.
    The migration guide can be found at: http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.1/migration/guide/Migration_Book.html

  • ACS Migration from 4.1.1.23 to 5.2

    I need to upgrade my ACS for windows 4.1.1.23 to 5.2 as we have come across the windows 2008R2 AD problem. Now reading the migration document it says I need  to go to at least 4.1.1.24 first which will not be a problem, then I need a migation server, so that means I need another ACS server as the migration server.
    As I already have 2 ACS servers could I use one of them as the Migration server, ie take it out of production?

    Hello,
    The migration utility can only be executed on an ACS for Windows server as direct access to the Windows OS is needed (RDP connection is not supported for the migration procedure. Direct access to the server is needed).
    If you have two ACS servers and one of them is an ACS for Windows you might want to take it out of production and run the migration.bat file on it. It will come up with the CMD windows that will prompt you for the details needed during the migration process.
    Your statement is completely valid and should be a good approach in order to migrate your ACS 4.x database to ACS 5.x.
    Hope this clarifies it.
    Regards.

  • ACS 3.3 to 4.1 EAP-FAST PAC migration

    Our 3rd party supplicants don't handle EAP-FAST in-band PAC changes well at all. To allow a smooth transition from Windows ACS 3.3 to 4.1, we'd like to migrate the v3.3 master or at least the secondary PAC to ACS 4.1. Replication is not an option between 3.3 & 4.1, so I'm looking for a manual way to accomplish this. TIA.

    So what you want to do is following :
    > Install LMS 4.1 on Windows
    > Decomission LMS 3.2
    > Rename hostname and IP for LMS 4.2 to same as older LMS 3.2
    IP change is not a problem, but for hostname change you should run NMSROOT\bin\hostnamechange.pl script.
    For more details, please check the following document :
    http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.1/user/guide/admin/appendixcli.html#wp1041971
    -Thanks

  • Migrating a Cisco ACS Database

    Hi,
    Can there be any potential problems, if we want to migrate an existing Cisco ACS Database to a different physical Server (Keeping the same IP information etc) ?
    We were running Cisco ACS evaluation version for Cisco NAC (CTA) and now want to make it production while moving it to a different server.
    Regards \\ Naman

    Hi,
    I'm not an expert for the ACS but when you look into System configuration you will find the feature 'Database Replication'. With an eval version you should be able to test this feature.
    Cheers,

Maybe you are looking for