Migrate agents to a new server

This section provides an overview and procedure for migrating agents from an existing Nuix Adaptive Security server to another new server. You may need to migrate agents in the following scenarios:

When building a new Nuix Adaptive Security server on new hardware, for example, to upgrade the operating system or MySQL. In this scenario, you want to migrate agents from the old server to the new one.

When you want to move a single endpoint agent from a server used for enterprise-wide monitoring to a server only used for active investigations.

This is not an upgrade procedure.

Prerequisites

You need to have both the existing server and the new server up and running.

Agent migration

On the new Nuix Adaptive Security server, take note of the server’s IP address and the agent certificate which is the ca.cert.pem file located in Program Files. View the certificate by opening ca.cert.pem file in Notepad or another text reader application. You will need to copy the certificate over to the existing server. There are several ways to copy over the certificate. Use your enterprise’s preferred method for copying over the certificate information.

On the existing server, you will add the new server and the certificate using the Nuix Adaptive Security application. This will allow the agents to migrate over to the new server. In the Nuix Adaptive Security application, there are two options on how you can add the new server.

Option 1: Add the server to an existing server set. When using this option, the agents will start to migrate over to the new server once the old server is turned off.

Open the application and go to the System module.

Select the Servers tab, then select the server set that you want to modify.

Select +Add.

Add the new server’s IP address and certificate.

Save and publish the server set.

Note: The agents will try to go to the first server in the server list and then if they can’t reach it, they will go to the next server.

Option 2: Create a new server set with both servers. When using this option, the agents will not migrate over until you add the new server set to the agent configuration.

Open the application and go to System module.

Select the +New Servers button and name the server set.

The default server is added automatically, add the new server’s IP address and certificate.

Save and publish the new server set.

Important: Wait for the agents to migrate over to the new server before you delete the existing server from the server set. Then you can turn off the existing server.

Agents will continue to alert on logic rules. You can also export logic rules to the new server.

To upgrade the agents, see Upgrading the agent in the Nuix Adaptive Security User Guide. To configure the agent, see Configuring the agent in the Nuix Adaptive Security User Guide.