markvh Super Contributor.
Super Contributor.
128 views

Agent server information

We have 4 servers and have added 4 new ones which will be replacing the older SLES 11 servers.

Some of the workstations are frozen with Deep Freeze.  What would be the best method to ensure the agents continue to communicate effectively with the new servers when the old ones are removed. 

Thaw and refresh the agent information so it has the new server info and then freeze the machine again. 

Point a DNS entry for the old server to the ip of the new server so when the agents communicate they will still reach the new servers. This would only be temporary until workstation info is update when thawed or rebuilt or redeployed at the next build cycle. - December. 

 

 

Labels (1)
0 Likes
3 Replies
Micro Focus Expert
Micro Focus Expert

Re: Agent server information

Yes, I would point set the DNS Entry for the Old Server to point to the IP Address of the New Server.

Then in the ZCC, go to the new primary and find 'Infrastructure Management" under settings and add the old server's DNS entry under "Additional DNS Names" for that server.

Thus will cause the Agent to know that even though the server is present the cert "MyNewServer.Com" when I hit "MyOldServer.Com", that his is expected and to not reject it.

 

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Agent server information

Note: After Making the "Additional DNS Name" change, allow a few hours for things to stew....Location Rules take a while to propagate....

Then when you do a " zac zc -l " command, it should list both DNS Names for the server.

Also, Make sure your Internal CA gets migrated to a new server, this can be missed as a lost CA will only rear its head when you need to make new certs.  Reminder: When a CA is migrated to a new server, the "Issued By" will also be from the name of the original server, since that was the name the "CA" was given and the CA was moved and not renamed.  It is not possible to "Rename" a CA without invalidating all the certs.

 

0 Likes
markvh Super Contributor.
Super Contributor.

Re: Agent server information

Thanks, yes the plan is to move CA role to a new server and then for the new server, as well as add the old CA servers name to the "Additional DNS Names" of the new server. The DNS name for the old server will also be updated to point to the new server.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.