Migration Mode

To allow data migration, the destination component, i.e. OneSpan Authentication Server, OneSpan Authentication Server Appliance or OneSpan Authentication Server Virtual Appliance, must always be started in migration mode.

Whether the source component must be started in migration mode depends on the type and the version of the source component.

OneSpan Authentication Server migration mode

If you migrate from OneSpan Authentication Server, the SOURCE OneSpan Authentication Server instance must be started in migration mode. This allows verification of data and circumvent stricter password requirements implemented to be handled during the data migration.

You cannot switch OneSpan Authentication Server (3.10 or later) to migration mode if the built-in continuous server data migration initiated by a previous upgrade has not been completed yet and a data migration task is still in progress. For more information, refer to the OneSpan Authentication Server Product Guide, Section "Upgrading OneSpan Authentication Server and Migrating Server Data".

To start OneSpan Authentication Server in migration mode

1. Open the OneSpan Authentication Server configuration file in a text editor, i.e. identikeyconfig.xml. This file is located in:

   /etc/vasco/ias (Linux)

   %PROGRAMFILES%\VASCO\IDENTIKEY Authentication Server\bin (Windows)

2. Set the data attribute of the OperationMode element to 2. The OperationMode element is located in VASCO > Server-Config:

   <?xml version="1.0" encoding="UTF-8"?>
   <VASCO>
     ...
     <Server-Config>
       <Server-Location type="string" data="10.2.1.76"/>
       <RADIUS-Dictionary-File type="string" data="/radius.dct"/>
       <OperationMode type="unsigned" data="2"/>
     ...

3. Restart OneSpan Authentication Server.

4. Proceed with the migration process as normal (see Migrate data).

5. When you have completed the migration process, set the data attribute of the OperationMode element back to 1.

   <OperationMode type="unsigned"data="1"/>

6. Restart OneSpan Authentication Server again to start it in normal mode.

OneSpan Authentication Server Appliance/OneSpan Authentication Server Virtual Appliance migration mode

If you migrate from OneSpan Authentication Server Appliance/OneSpan Authentication Server Virtual Appliance, the SOURCE OneSpan Authentication Server Appliance/OneSpan Authentication Server Virtual Appliance must be started in migration mode.

To start OneSpan Authentication Server Appliance/OneSpan Authentication Server Virtual Appliance in migration mode

1. Open a web browser and go to the OneSpan Customer Portal: https://cp.onespan.com/. Enter the maintenance contract ID and serial number provided by OneSpan for your OneSpan Authentication Server Appliance and click Sign in.

2. In the OneSpan Customer Portal, navigate to the Downloads menu and select the required download package for your product, in this case the enable-dmt-mode-<version>.bun package.

3. Select the required ISO file to download the selected package for your product and click Save File in the following dialog.

4. Load the respective enable-dmt-mode-<version>.bun package into OneSpan Authentication Server Appliance/OneSpan Authentication Server Virtual Appliance. The required packages are also shipped with every version of OneSpan Authentication Server Appliance/OneSpan Authentication Server Virtual Appliance.

5. After you have loaded the package into OneSpan Authentication Server Appliance / OneSpan Authentication Server Virtual Appliance, upload it in the Update wizard.

6. Browse to the uploaded package. The wizard takes you directly to the Verify Update page.

   On the Verify Update page, the wizard displays the steps to verify the update progress. Once this has been successfully verified, a change log for the selected update is displayed. Click Next to initiate the installation of this update and restart of OneSpan Authentication Server Appliance.

   Services are temporarily not available while OneSpan Authentication Server Appliance is restarted.

   If you cancel the update process, the Update Wizard will be closed.

   The Install Update page displays the progress of the installation steps. OneSpan Authentication Server Appliance will be automatically restarted after installation is completed; log in to the OneSpan Authentication Server Appliance Configuration Tool after restart, and view the installation feedback on the Status screen.

   When you apply the bundle file to set OneSpan Authentication Server Appliance to migration mode, the Update wizard provides a dedicated user account that you should explicitly use for migration purposes. By default, that user account is called migration_user, unless another user account with that name already exists. In that case, it is named differently.