Moving Roles - Revision history

Ltalaschus at 07:03, 23 September 2024

2024-09-23T07:03:35Z

Ltalaschus at 13:30, 22 August 2023

2023-08-22T13:30:58Z

Rrommelrath at 15:17, 16 November 2022

2022-11-16T15:17:21Z

Ltalaschus: /* Moving the Management Server */

2022-11-16T14:38:11Z

Moving the Management Server

Ltalaschus: /* Single Server Mode */

2022-11-16T14:37:47Z

Single Server Mode

Rrommelrath at 09:58, 16 November 2022

2022-11-16T09:58:03Z

Ltalaschus: /* Moving the Management Server */

2022-11-14T14:22:29Z

Moving the Management Server

Dweuthen: /* Single Server Mode */

2017-03-23T16:26:30Z

Single Server Mode

Dweuthen: /* Multi Server Mode */

2017-03-23T16:19:31Z

Multi Server Mode

Dweuthen: /* Single Server Mode */

2017-03-23T16:19:09Z

Single Server Mode

@@ Line 12: / Line 12: @@
 *: [[File:Spe-certificate-store.png|center]]
 * Export the SSL certificates and private keys from the old server's certificate store and import them into the same location on the new server.
-** On Windows Server 2012 R2 you can use the following PowerShell command to export all certificats stored in the computers ''MY'' store as PFX containers to the current user's desktop. That PowerShell session requires elevated privileges:<br/><pre>(Get-ChildItem Cert:\LocalMachine\My).Thumbprint | ForEach-Object { Export-PfxCertificate -Cert ("Cert:\LocalMachine\My\{0}" -f $_) -FilePath ("$env:USERPROFILE\Desktop\{0}.pfx" -f $_) -Password  (ConvertTo-SecureString -AsPlainText -Force "not_secure_234") }</pre>
+** On Windows Server 2016 and newer you can use the following PowerShell command to export all certificats stored in the computers ''MY'' store as PFX containers to the current user's desktop. That PowerShell session requires elevated privileges:<br/><pre>(Get-ChildItem Cert:\LocalMachine\My).Thumbprint | ForEach-Object { Export-PfxCertificate -Cert ("Cert:\LocalMachine\My\{0}" -f $_) -FilePath ("$env:USERPROFILE\Desktop\{0}.pfx" -f $_) -Password  (ConvertTo-SecureString -AsPlainText -Force "not_secure_234") }</pre>
-** Windows Server 2012 R2 Powershell command to import the previously exported certificates from the current user's desktop into the new server's certificate store. That PowerShell sessions requires elevated privileges:<br/><pre>Get-ChildItem -Path $env:USERPROFILE\Desktop\ -Filter *.pfx | Import-PfxCertificate -Exportable -Password  (ConvertTo-SecureString -AsPlainText -Force "not_secure_234") -CertStoreLocation Cert:\LocalMachine\My</pre>
+** Windows Server 2016 and newer Powershell command to import the previously exported certificates from the current user's desktop into the new server's certificate store. That PowerShell sessions requires elevated privileges:<br/><pre>Get-ChildItem -Path $env:USERPROFILE\Desktop\ -Filter *.pfx | Import-PfxCertificate -Exportable -Password  (ConvertTo-SecureString -AsPlainText -Force "not_secure_234") -CertStoreLocation Cert:\LocalMachine\My</pre>
 * Remove the <tt>%program files%\MailStore Infrastructure\config</tt> directory on the new server and replace it with the <tt>config</tt> directory from the old one.
 * Transfer your instance data directories to the new server. If the instance data on the new server is stored in a different location than on the old one, the ''Base Directory'' of the instances must be adjusted accordingly. Refer to [[Instance_Management#Archive_Stores|Instance Management]] for further details.

@@ Line 20: / Line 20: @@
 * [[Management Console - Logging On|Log on]] to the Management Console and check the dashboard for the connection status of servers and roles.
 * [[Management_Console_-_System_Administrators|Re-enable Multi-Factor Authentication]] for system administrators that had it enabled.
 == Multi Server Mode ==
@@ Line 35: / Line 36: @@
 * [[Management Console - Logging On|Log on]] to the Management Console and check the dashboard for the connection status of servers and roles.
 * [[Management_Console_-_System_Administrators|Re-enable Multi-Factor Authentication]] for system administrators that had it enabled.
 === Moving an Instance Host ===

@@ Line 4: / Line 4: @@
 * The following only applies if MFA has been enabled for some or all system administrators:
 *:* Log in at the Management Console and [[Management_Console_-_System_Administrators|disable MFA]] for all administrators that have it enabled.<br />The MFA secret, that is used to generate MFA codes, is stored DPAPI-protected in the management database. When the management database is transferred to a different machine, the secret cannot be decrypted on that machine and manual editing of the database would be required, which should be avoided.
-* Start the MailStore Service Provider Edition Configuration tool on a server that is a Management by double-clicking it's desktop icon. On Windows Server Core use the command line prompt to start the executable (default: <tt>%PROGRAMFILES%\MailStore Infrastructure\MailStoreInfrastructureConfig.exe</tt>.
+* Start the MailStore Service Provider Edition Configuration tool on the server that has the Management Server role by double-clicking its desktop icon. On Windows Server Core use the command line prompt to start the executable (default: <tt>%PROGRAMFILES%\MailStore Infrastructure\MailStoreInfrastructureConfig.exe</tt>.
 * Stop the ''Client Access Server'', ''Instance Host'',  and ''Management Server'' services.
 * Transfer your MailStore SPE license to the new server through our [https://my.mailstore.com/TransferLicense license portal].

@@ Line 35: / Line 35: @@
 * [[Management Console - Logging On|Log on]] to the Management Console and check the dashboard for the connection status of servers and roles.
 * [[Management_Console_-_System_Administrators|Re-enable Multi-Factor Authentication]] for system administrators that had it enabled.
 === Moving an Instance Host ===

@@ Line 2: / Line 2: @@
 In order to retain a single server mode setup by keeping the Management Server, Instance Host and Client Access Server on a single server, follow the instructions below. If only one of the roles in a single server mode setup should to be moved to another server, refer to corresponding section under [[Moving Roles#Multi_Server_Mode|Multi Server Mode]] in this article.
 * Start the MailStore Service Provider Edition Configuration tool on a server that is a Management by double-clicking it's desktop icon. On Windows Server Core use the command line prompt to start the executable (default: <tt>%PROGRAMFILES%\MailStore Infrastructure\MailStoreInfrastructureConfig.exe</tt>.
 * Stop the ''Client Access Server'', ''Instance Host'',  and ''Management Server'' services.
@@ Line 17: / Line 19: @@
 * Start the ''Management Server'' service followed by the ''Instance Host'' and ''Client Access Server'' service.
 * [[Management Console - Logging On|Log on]] to the Management Console and check the dashboard for the connection status of servers and roles.
 == Multi Server Mode ==

@@ Line 20: / Line 20: @@
 == Multi Server Mode ==
 === Moving the Management Server ===
-* Start the MailStore Service Provider Edition Configuration tool on a server that is a Management by double-clicking it's desktop icon. On Windows Server Core use the command line prompt to start the executable (default: <tt>%PROGRAMFILES%\MailStore Infrastructure\MailStoreInfrastructureConfig.exe</tt>.
+* The following only applies, if MFA has been enabled for some or all system administrators:
 * Stop the ''Management Server'' service.
 * Transfer your MailStore SPE license through our [https://my.mailstore.com/TransferLicense license portal].
 * Install the MailStore Service Provider Edition on the new server and set it up in [[Multi_Server_Mode_Setup|Multi Server Mode]]
 * Add the ''Management Server'' role on the new server, but do not start it yet.
-* Transfer the file <tt>MailStoreManagementDatabase.json</tt> from the old server's configuration directory to the same location on the new server. By default this file resides in <tt>%programfiles\MailStore Infrastructure\config%</tt>.
+* Transfer the file <tt>MailStoreManagementDatabase.json</tt> from the old server's configuration directory to the same location on the new server. By default, this file resides in <tt>%programfiles\MailStore Infrastructure\config%</tt>.
 * Start the ''Management Server'' service on the new server.
 * Adjust the ''Management Server'' setting in the configuration of each  ''Instance Host'' and ''Client Access Server'' by clicking on the corresponding ''Configure...'' button in the MailStore Service Provider Edition Configuration tool.
 * [[Management Console - Logging On|Log on]] to the Management Console and check the dashboard for the connection status of servers and roles.
 === Moving an Instance Host ===

@@ Line 13: / Line 13: @@
 ** Windows Server 2012 R2 Powershell command to import the previously exported certificates from the current user's desktop into the new server's certificate store. That PowerShell sessions requires elevated privileges:<br/><pre>Get-ChildItem -Path $env:USERPROFILE\Desktop\ -Filter *.pfx | Import-PfxCertificate -Exportable -Password  (ConvertTo-SecureString -AsPlainText -Force "not_secure_234") -CertStoreLocation Cert:\LocalMachine\My</pre>
 * Remove the <tt>%program files%\MailStore Infrastructure\config</tt> directory on the new server and replace it with the <tt>config</tt> directory from the old one.
-* Transfer you instance data directories to the new server. If the instance data on the new server is stored in a different location than on the old one, the ''Base Directory'' of the instances must be adjusted accordingly. Refer to [[Instance_Management_-_General_Administration#Configuring_Instances|Configuring Instances]] for further details.
+* Transfer you instance data directories to the new server. If the instance data on the new server is stored in a different location than on the old one, the ''Base Directory'' of the instances must be adjusted accordingly. Refer to [[Instance_Management#Archive_Stores|Instance Management]] for further details.
 * When the host name of the server has changed, also follow the instructions in [[Renaming_Servers#Renaming_the_Server|Renaming the Server]]
 * Start the ''Management Server'' service followed by the ''Instance Host'' and ''Client Access Server'' service.

@@ Line 28: / Line 28: @@
 * Start the ''Management Server'' service on the new server.
 * Adjust the ''Management Server'' setting in the configuration of each  ''Instance Host'' and ''Client Access Server'' by clicking on the corresponding ''Configure...'' button in the MailStore Service Provider Edition Configuration tool.
-* [[Management Console#Logging On|Log on]] to the Management Console and check the dashboard for the connection status of servers and roles.
+* [[Management Console - Logging On|Log on]] to the Management Console and check the dashboard for the connection status of servers and roles.
 === Moving an Instance Host ===
@@ Line 37: / Line 37: @@
 * [[Multi_Server_Mode_Setup#Pairing_with_Management_Server|Pair with the Management Server]].
 * Start the ''Instance Host'' service.
-* [[Management Console#Logging On|Log on]] to the Management Console and check the dashboard for the connection status of servers and roles.
+* [[Management Console - Logging On|Log on]] to the Management Console and check the dashboard for the connection status of servers and roles.
 * Follow the [[Moving_Instances|Moving Instances]] guide to move the instances to the new instance host.
 * Remove the ''Instance Host'' role from the old server.
@@ Line 52: / Line 52: @@
 * Adjust the certificate settings in the ''Configure Client Access Server Role'' dialog to use the imported certificates.
 * Start the ''Client Access Server'' service.
-* [[Management Console#Logging On|Log on]] to the Management Console and check the dashboard for the connection status of servers and roles.
+* [[Management Console - Logging On|Log on]] to the Management Console and check the dashboard for the connection status of servers and roles.
 * Remove the ''Client Access Server'' role from the old server.
 * Finally [[Management_Console_-_Infrastructure#Removing_Client_Access_Servers|remove the client access server]] that still exist with the old host name.