NOTE:The steps documented in this section have not been tested for replacing a Windows or a Linux Primary Server with an Appliance server.
If you have only one Primary Server in the Management Zone and if you want to replace the device hosting the Primary Server with a new device that has the same host name and IP address as the old device, you must move the Primary Server to the new device.
Ensure that the version on the new server and the existing Primary Server is ZENworks 2020 .
NOTE:If you want to replace more than one Primary Server, you need to install the same number of servers and replace each server on a one to one basis, either simultaneously or sequentially. For faster deployment, all servers can be deployed to a single temporary zone.
If you have two Primary Servers (PS1 and PS2) in the zone and both are configured as MDM Servers, then if PS1 is removed/deleted, then all the mobile devices enrolled to PS1 should be re-enrolled to PS2.
If you are replacing a Primary Server (PS1) with another Primary Server (DR1) with the same DNS name. If PS1 is configured as an MDM server, then even DR1 becomes an MDM server, as DR1 is equivalent to PS1. Hence, all mobile devices enrolled to PS1 work seamlessly with DR1.
Take a reliable backup of the existing ZENworks Server.
For detailed information on how to take a backup of the ZENworks Server, see Section 1.0, Backing Up and Restoring the ZENworks Server and Certificate Authority.
Take a backup of the novell-tftp.conf and novell-proxydhcp.conf files from /etc/opt/novell on Linux and ZENWORKS_HOME\conf\preboot on Windows.
(Conditional) Take a reliable backup of the certificate authority of the Primary Server.
For detailed information on how to take a backup of the certificate authority, see Section 1.3, Backing Up the Certificate Authority.
During the ZENworks Server backup, certificates are backed up for Primary Servers having an internal Certificate Authority and the same network identity (IP, FQDN, and Cert). Also, during the ZENworks Server restore, the Certificate Authority is restored.
(Conditional) If Zookeeper is enabled, take a backup of the ZooKeeper folder available at /var/opt/novell/zenworks/zookeeper.
(Conditional) If Kafka is enabled, then take a backup of the following files:
Kafka-data available at /var/opt/novell/zenworks/kafka-data.
zenCaCertStore and zenCacertConfig.xml available at /etc/opt/novell/zenworks/security.
(Conditional) If you have edited the connector-configs.xml or the stream-processor-config.xml available at /etc/opt/novell/zenworks, then take a backup of these files.
(Conditional) If Vertica is enabled, then take a back up of the database files available at /vastorage/home/dbadmin/zenworks and the config file available at /opt/vertica/config/admintools.conf.
(Conditional) Take a reliable backup of the database in any of the following scenarios:
You are using an internal ZENworks database.
You are using an external database installed on the device hosting the Primary Server and you do not plan to use the device after uninstalling the Primary Server.
To take a backup of an external database, see the documentation for the database.
Stop all the ZENworks services on the Primary Server.
For detailed information on how to stop the ZENworks services on Windows, see ZENworks Primary Server and Satellite Reference. For detailed information on how to stop the ZENworks services on Linux, see ZENworks Primary Server and Satellite Reference.
Take a reliable backup of the content-repo directory of the Primary Server.
The content-repo directory is located by default in the ZENworks_installation_directory\work directory on Windows and in the /var/opt/novell/zenworks/ on Linux.
Ensure that the images directory located within the content-repo directory has been successfully backed up.
(Optional) If there are any TFTP customizations related to imaging, then back up the TFTP files. The tftp directory is located in the /srv/ folder on Linux and in %ZENWORKS_HOME%\share\ on Windows.
Disconnect the device from the network.
To restore on a new Primary Server, ensure that the total RAM allocated in the new Primary Server is the same as that in the existing Primary Server. For a Primary Server hosted in the virtual environment, you need to reserve the allocated memory.
Install ZENworks 2020 on the new server with the following settings that are same as that of the old Primary Server:
Installation drive and path.
Management Zone name
NOTE:Install the new server to a temporary zone and not to the existing production zone.
The new server can be installed with any database engine (preferably the same database engine as that in the production zone, that is, if the production zone is using MSSQL, then install the new server with MSSQL in the temporary zone). After the existing Primary Server is replaced with the new server, the new server will start using the actual database in the production zone.
Do the following on the new Primary Server:
Restore the backed-up ZENworks Server.
For detailed information on how to restore the ZENworks Server, see Section 1.0, Backing Up and Restoring the ZENworks Server and Certificate Authority.
Restore the files novell-tftp.conf and novell-proxydhcp.conf, which were backed up in Step 2, to /etc/opt/novell on Linux and ZENWORKS_HOME\conf\preboot on Windows.
Run the following commands on ZENworks Appliance, after restoring the backed-up ZENworks Server:
rm -f /etc/opt/novell/zenworks/preboot/novell-tftp.conf
ln -s /etc/opt/novell/novell-tftp.conf /etc/opt/novell/zenworks/preboot/novell-tftp.conf
rm -f /etc/opt/novell/zenworks/preboot/novell-proxydhcp.conf
ln -s /etc/opt/novell/novell-proxydhcp.conf /etc/opt/novell/zenworks/preboot/novell-proxydhcp.conf
(Conditional) Restore the backed-up database. For more information, see Backing Up and Restoring the PostgreSQL Database.
(Conditional) Restore the backed up ZooKeeper folder at /var/opt/novell/zenworks/zookeeper and ensure that the permission of this folder is set to ZENworks.
(Conditional) To restore Vertica in the new server, perform the following steps:
Run the following command and provide GUID, DNS, or the path of the new server:
Run the command su dbadmin to switch user to dbadmin.
Install Vertica on the new server by executing the following commands:
sudo /opt/vertica/sbin/install_vertica --record-config vertica-install.conf --license CE --accept-eula --dba-user-password <dbadmin_password> --hosts <DNS-of-machine> -l /vastorage/home/dbadmin --failure-threshold FAIL
sudo /opt/vertica/sbin/install_vertica --config-file vertica-install.conf
Restore the backed up database files to the path /vastorage/home/dbadmin/zenworks and the config file to the path /opt/vertica/config/admintools.conf. Ensure that the permission of these files are set to dbadmin:verticadba.
Run the following command:
ssh-keygen -R <ip of replacing host> -f /vastorage//home/dbadmin/.ssh/known_hosts
(Conditional) If Vertica is running as a cluster, enable passwordless ssh amongst the other servers in the zone by running the command ssh-copy-id dbadmin@<ip of the machine that we are replacing> from another Vertica server in the cluster. Subsequently, stop the Vertica service on all other servers in the Vertica cluster and go to , to start the database from any other server in the cluster.
(Conditional) If the IP address of the new server is different from that of the older server, then run the following command in the older server.
Login as dbadmin (su dbadmin)
Run the following command where the content of the ip.txt file should be <old ip> <new ip>:
admintools -t re_ip -f /tmp/ip.txt
Run the following command and wait for the database to start:
admintools -t start_db –d zenworks
(Conditional) If you are replacing a server with an Appliance, connect to the database and execute the following query:
insert into zzenserverroles(id, Roles, position) values (<GUID>,'ApplianceServer',(select max(position) + 1 from zzenserverroles where id = <GUID> ));
Where <GUID> is the old Primary Servers’s GUID that is being replaced.
Assume e9c2c75196f7dc7bb25e6134b03cfdfd is the GUID of the Primary Server, then depending on the database, specify the GUID as shown below:
For PostgreSQL: '\xe9c2c75196f7dc7bb25e6134b03cfdfd'
For MS SQL: 0xe9c2c75196f7dc7bb25e6134b03cfdfd
For Oracle: 'E9C2C75196F7DC7BB25E6134B03CFDFD'
(Conditional) If ZCC (on the new server) Diagnostics fails to connect, then execute the following commands in the order listed below:
novell-zenworks-configure -c MergeTruststore -Z
novell-zenworks-configure -c EnableJMX
novell-zenworks-configure -c ZenProbe
novell-zenworks-configure -c Start. Select the restart option to restart the services.
Re-create all the default and custom deployment packages.
Default Deployment Packages: At the server’s command prompt, enter the following command:
novell-zenworks-configure -c CreateExtractorPacks -Z
IMPORTANT:Ensure that you do not run the zman surp command instead of novell-zenworks-configure -Z -c CreateExtractorPacksConfigureAction to rebuild deployment packages. The command novell-zenworks-configure -Z -c CreateExtractorPacksConfigureAction uses a different method to rebuild deployment packages. For more information, see Rebuilding the Default Packages in ZENworks Discovery, Deployment, and Retirement Reference.
Custom Deployment Packages: At the server’s command prompt, enter the following command:
novell-zenworks-configure -c RebuildCustomPacks -Z
To avoid any errors while running this command, ensure that the custom packages are available in the new server at the following locations before you run the command:
For Linux: /opt/novell/zenworks/install/downloads/custom
For Windows: %zenworks_home%\install\downloads\custom
Copy all the contents of the backed-up content-repo directory to the ZENworks_installation_directory%ZENWORKS_HOME%\work\ directory on Windows or to the/var/opt/novell/zenworks/ directory on Linux. If you have any issues in copying content-repo directory in Linux.
(Optional) Also, copy the backed-up TFTP files to the second Primary Server. The tftp directory is located in the folder /srv/ on Linux and in the folder %ZENWORKS_HOME%\share\ on Windows.
Run permissions.sh command.
(Conditional) Execute the zac zesm-ref command to reset the ZENworks Endpoint Security Management cache on the managed devices.
Ensure that the new server is running correctly. Subsequently, uninstall ZENworks 2020 from the old device. For detailed information on how to uninstall ZENworks 2020, see ZENworks Uninstall Guide.
WARNING:After the new Primary Server starts running, you must disconnect the old Primary Server from the network and uninstall ZENworks, or disable ZENworks services so that it cannot register back to the zone.