Skip to main content

UMRA Host Migration/Upgrade - Knowledgebase / UMRA - Tools4ever NW Support

UMRA Host Migration/Upgrade

Authors list

So you've decided to upgrade the version of Windows Server that UMRA is hosted on. There are a few things to consider and items your will need to retrieve from your old/current UMRA server.  Any outbound connectors, data sources etc. will also need to replicated on the new host. Leave the old server running so that previous settings and files can be retrieved and reviewed. If one of the following steps references a connection or service that you are not currently utilizing then skip that step.


UMRA software requirements:

The new Windows Server will need to have enough resources allocated. A suggestion of 8gb RAM, 80gb of hard drive space, and at least 2 3.0+ Ghz CPU cores. Virtual machines are encouraged.


--Grab from old server--

1. The Google connection certificate should be exported from the Windows certificate store. The certificate will be located in the Certificates - Local Computer > Personal > Certificates area . The certificate to export will have an "Issued To" and an "Issued By" column value that is a 21 digit number with an expiration date in the future . Right click the certificate and choose 'All Tasks' > 'Export...'. In the export wizard, when asked, choose 'Yes, export the private key". When asked to enter a password for the cert type 'notasecret' without the quotes. Copy the exported certificate to the new server.

2. Copy the ODBC connection details for later use on the new server. ODBC connections(s) can be found in the Windows application ODBC Data Sources under the 'System DSN' tab. This app is divided into 32-bit and 64-bit connections. Connections listed with the opposing bit type will not open within the other.  

3. Backup current UMRA scripts. 

  1. Create a new folder on the current user's desktop. 
  2. From within the UMRA console click 'UMRA Service' Menu > 'Manage service projects...'.
  3. With the top item selected (blue) hold shift and click the bottommost script to select them all.
  4. Click the 'Export...' button on the right.
  5. When asked to export as XML click 'Yes.'
  6. Choose the new folder created in step 1.
  7. It may take upwards of 30 seconds to finish the export. Check the folder once it has finished. There will be many .xml files exported.
  8. Right click the folder containing the exported files and choose 'Send to > Compressed (Zipped) Folder.
  9. Finish the compression wizard.
  10. Copy .zip containing all exported scripts to the new server. Keep a copy of this file somewhere else as an added safety backup.


--Prepare new server--

Before installing UMRA:

1. If used, install Windows drivers for data connections via ODBC. The latest driver should be available through your data host.  A default fresh install of UMRA will use the 64-bit service. This will require the 64bit ODBC connection driver.  After the driver is installed rebuild the connection in the Windows application ODBC Data Sources with the correct bit depth.

2. Office 365 connections have a few prerequisites:

     - Microsoft .NET 3.5 (Press the Windows key on your keyboard, type "Windows Features", and press Enter. The Windows Features dialog box appears. Check the box next to .NET 3.5)

     - Microsoft Online Service Sign-In Assistance (Download from Microsoft).

     - PowerShell module 'MSOnline'. Installed via the PowerShell prompt using "Install-Module -Name MSOnline".

3.  Network firewalls will need to have connection rules duplicated and set for the new server. (If any are used.)

4.  Open Command Prompt as an Administrator and run the following command:  CERTUTIL -f -p notasecret -importpfx "**path_to_file**"  to import the Google Certificate. The **path_to_file** will need to be replace with the correct path to your exported cert. We have noticed that manually importing the Google certificate using the import wizard may cause the cert to not be recognized by the automation.


Install UMRA:

1. Download the latest UMRA installer from : https://support.nwtools4ever.com/downloads/user-management-resource-administrator-umra. You will need to login to the site to access the download. All currently registered customers are able to login, you may need to reset your password. If you are still having problems getting logged in, please contact support for assistance.

2. Run the UMRA installer.

3. Unzip the UMRA script backup to a folder on the new server.

4. Open UMRA Console. You will be asked to install the UMRA service, answer yes. When prompted for an administrator account to launch the service enter the Active Directory account that was used to run the 'UMRAsvc' Windows service on the previous server.  Finish the wizard. 

5. Verify you are connected to the UMRA service by clicking 'UMRA Service' > 'Connect...'. If you receive a prompt to enter the computer name where the service is running, enter the new UMRA server name.


Restore UMRA scripts:

  1. Click 'UMRA Service' menu > 'Manage service projects...'.
  2. Click the 'Import' button on the right side of the window.
  3. Navigate to the folder that contains the unzipped backup files.
  4. Click any listed backup script one time and then press 'ctrl +a' to choose all listed scripts.
  5. Click the 'Open' button. The window will now be populated with the UMRA scripts.
  6. Click the 'Close' button.
  7. Open the task scheduling windows within UMRA by clicking the 'View' menu > 'Task Scheduling'. 
  8. Disable all scripts by right clicking each entry and then choosing 'Disable'. Be sure to note which are already disabled.


Install the PowerShell service:

  1. Click 'UMRA Service' menu > 'Service Properties...' > 'Powershell Agent' tab
  2. Click the 'Enable Powershell Agent' box then click the 'Manage Powershell Agent' button then click 'next' until finished.
  3. Close service properties window if still open.
  4. Click the 'Tools' menu >' Options...' > 'Powershell Agent' tab
  5. Click the 'Enable Powershell Agent' box then click the 'copy from service' button. Answer Yes to overwrite settings.


Install PSM (if using):

  1. Click 'Tools' menu > 'Password Synchronization Manager' > 'Installation - Upgrade'.
  2. Choose 'Install or upgrade UMRA PSM on all domain controllers in the domain. (Recommended)
  3. Click 'next'.
  4. Enter your domain and click 'next'. UMRA will now search for domain controller in that entered domain.
  5. Close and reopen the 'Installation - Upgrade' menu.
  6. Click the first domain controller listed and then click 'Options...'.
  7. Change the computer name listed in the Serverlist box to the new UMRA server name.
  8. Repeat steps 6 and 7 for all remaining listed domain controllers.
  9. Click 'Close'.
  10. Click 'Tools' menu > 'Password Synchronization Manager' > 'Configuration'.
  11. Check 'Enable Password Synchronization Manager'
  12. Change the dropdown list to match the script that is listed on the old server.
  13. Click 'OK'.
  14. From the 'Task Scheduling Overview' window enable the project listed with PSM in the name.
  15. Let the script run and monitor for errors.