Skip to main content

How do I transfer my Enterprise Server to a new machine? - Kennisbank / ESET Endpoint Encryption - ESET Tech Center

How do I transfer my Enterprise Server to a new machine?

Authors list
The following steps detail the manual method to backup the Enterprise Server data so that it can be restored on another machine. 
 
Important: Since v2.6.1 of the Enterprise Server there is a simpler method for backup or migration that we recommend is used.

This new process is detailed here: KB296 - Backing up the Enterprise Server, or migrating an Enterprise Server to a new host
 

Backup the Original Server

  • Close all browsers accessing the Enterprise Server.
  • Use Windows Explorer to open the Enterprise Server folder ('Program Files\DESlock+ Enterprise Server' or 'Program Files(x86)\DESlock+ Enterprise Server' on 64bit hosts).
  • Take a copy of the config.cfg files from the folder.
  • Download the token store migrate utility from here: http://download.deslock.com/download/temp/utils/MigrateTokenstoreTool.exe
  • Copy the utility to your Enterprise Server folder and run it.
  • Click the 'Backup' button.
  • Select a path to save the MigrateData.dat backup file.
  • Click the 'Exit' button.
  • Download SQL Management Studio Express appropriate for your platform.
  • Install the SQL Server Management Studio Express. Follow the steps through the setup wizard to complete installation.

 
  • From the start menu launch Microsoft SQL Server 2005\SQL Server Management Studio Express.

 

  • When Studio Express loads click the Connect button.

 

  • Expand the Databases tree to view the DESlock database. Right the DESlock entry then left click Tasks\Back Up...
 
  • The backup database dialog will appear.
  • With the default path selected click the Remove button in the destination section.
  • Then click the Add... button.

 

  • The backup destination path will be displayed. Click the browse ... button.

 

 

 

  • Use the tree view to select a destination path and the File name: entry to enter a backup filename.
  • Click the OK button to close the three open dialogs.
  • The last click of OK should show the backup process being performed and a success dialog displayed :

 

 
 
  • Use the run item from the start menu to browse to the folder C:\Program Files\DESlock+ Enterprise Server or on 64 bit systems C:\Program Files (x86)\DESlock+ Enterprise Server. Note if you have installed to a different drive or folder you will need to update the path to reflect this.

 

 

  • Use explorer to take a copy of the file ORGANISATIONNAME_ks.dat, the filename will match the name of your organisation, in our example screenshot below the organisation is named Test Organisation. This file contains your DESlock+ encryption keys. If you have multiple organisations then you will need to take copies of all the relevant *_ks.dat files.
 
  • Take a copy of the folder C:\Program Files\DESlock+ Enterpise Server\Installs. This folder contains the un-merged client install packages.

 

 

Restoration to a New Server

 

  • You should ensure that the original server is no longer running. Having two servers in existence will cause a loss of update packets from the DESlock+ Cloud. You should stop and disable the DESlock+ Enterprise Server Console and DESlock+ Enterprise Server Service on the original server.
 
  • Use the DESlock+ Pre-install to install the DESlock+ Enterprise Server on the new system. Please see the Software Installation section of the DESlock+ Enterprise Server Manual for full details
 
  • In the Enterprise Server Setup Wizard use the same Cloud ID (and if requested the .licence file) as was used to configure the original server.

 

 
WHEN CONFIGURING THE NEW SERVER YOU MUST USE THE SAME DESLOCK+ PROXY ID (CLOUD ID) THAT WAS USED TO CONFIGURE THE ORIGINAL SERVER. FAILURE TO USE THE SAME PROXY ID WILL RESULTS IN THE INABILITY TO MANAGE ENCRYPTION KEYS AND THE LOSS OF ABILITY TO MANAGE EXISTING WORKSTATIONS.
 
 
 
  • Open Control Panel\Administrative Tools\Services.
  • Stop both the DESlock+ Enterprise Server Console and DESlock+ Enterprise Server Serviceservices.
 
  • As before install and launch Microsoft SQL Management Studio Express.
  • Click the Connect button once Studio Express has Launched.
  • Expand the tree view to show the DESlock entry. Right click this entry and choose the Delete item.
     
     
  • On the Delete Object dialog set the tickbox Close existing connections and click the OK button.
 
  • Right click the Database tree item and select Restore Database....

  • In the To database: entry use the drop down list to select the DESlock item.
  • Select the From device: radio button then click the ... button.
  • Click the Add button.
  • Use the file view to navigate to your database backup file and click the OK button.
  • Click OK to close the Specify Backup dialog.
  • Set the check box in the Restore column next to your backup set.
  • The Restore Database dialog should now be similar to this :
 
 
  • Click the OK button.
  • A message will appear explaining that restoration has been successful. Click the OK button.
 
  • Expand the tree list to Databases\DESlock\Security\Users.
  • Select the user dlpenterpriseuser. Right click and choose Delete.
  • On the Delete Object dialog click the OK button.
  • Navigate the tree display to Security\Logins.
  • Select the dlpentepriseuser. Right click and choose Properties.
  • Select the User Mapping page.
  • Set the tickbox next to the DESlock database item.
  • Add the membership roles db_datareader, db_datawriter and db_owner by setting the tick boxes. Then click the OK button.
 
  • As before open C:\Program Files\DESlock+ Enterprise Server and copy your _ks.dat files into this folder replacing existing files if necessary.
  • Download the token store migrate utility from here: http://download.deslock.com/download/temp/utils/MigrateTokenstoreTool.exe
  • Copy the utility to your Enterprise Server folder and run it.
  • Click the 'Restore' button.
  • Select a path to your MigrateData.dat backup file.
  • Click the 'Exit' button.
  • Open Control Panel\Administrative Tools\Services.
  • Start both the DESlock+ Enterprise Server Console and DESlock+ Enterprise Server Service services.
 
  • The DESlock+ Enterprise Server can now be launched from All Programs\DESlock+ Enterprise Server\DESlock+ Enterprise Server (Local).

 

Keywords: Move, transfer, change

Add a comment

Please log in or register to submit a comment.

Need a password reminder?