Ask the Community
Groups
Migrating from an AAOP Password Server to Passly - Connect IT Community | Kaseya
<main> <article class="userContent"> <p><strong>Question</strong></p> <p>How can we migrate our legacy AuthAnvil On-Premises Password Server into the Passly integrated cloud Password Server?</p> <p><strong>Answer</strong></p> <p>The Integrated Password Server has a migration tool built directly into the tenant.<br><strong>Note</strong>: The Notes from the AAOP Password Server will not be gathered by the export. These will need to be manually migrated on a per password record basis. Performing a full export from AAOP Password Server should export the notes in clear text.</p> <p><strong>Migration</strong></p> <p>There are some differences between the two products.</p> <p><strong>User access controls</strong></p> <p>You will want to create a Passly security group in your tenant for each Role that you use in AAoP Password Server. See this guide for setting up <a href="https://kaseya.vanillacommunities.com/kb/articles/aliases/idagent/hc/en-us/articles/360007304997" rel="noopener nofollow">Groups</a>. <br><strong>Note</strong>: Users will need to log out and log in before they see any new Vaults once added to the group(s).</p> <p><strong>Password Policies.</strong></p> <p>If you have created any unique AAOP Password Server policies those policies will need to be manually created by following these steps.<br><strong>Note</strong>: Failure to create custom Password Policies might cause the import to create an excessive number of polices.</p> <ol><li>Log into to your Passly tenant <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2F%28companyname%29.my.passly.com">https://(companyname).my.passly.com</a> </li> <li>Select <strong>Password Server</strong>,</li> <li>Select <strong>Password Policy</strong>.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/DF6DC2KFBIMS/mceclip14.png" alt="mceclip14.png" class="embedImage-img importedEmbed-img"></img></li> <li>Select <strong>+New</strong>.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/NJOS4O8CT4O1/mceclip15.png" alt="mceclip15.png" class="embedImage-img importedEmbed-img"></img></li> <li>Customise the policy to match your existing AAOP policy.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/2T05DGVXZH8P/mceclip16.png" alt="mceclip16.png" width="114" height="177" class="embedImage-img importedEmbed-img"></img></li> <li>Select <strong>Save Changes</strong> to commit the policy for use.</li> </ol><p> </p> <p><strong>Migrating the actual Passwords</strong></p> <ol><li>Log into to your Passly tenant <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2F%28companyname%29.my.passly.com">https://(companyname).my.passly.com</a> </li> <li>Select <strong>Password Server</strong>,<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/S16O9UEP70A5/mceclip0.png" alt="mceclip0.png" class="embedImage-img importedEmbed-img"></img></li> <li>Select <strong>Import</strong>.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/ERTAYO437AHO/mceclip1.png" alt="mceclip1.png" class="embedImage-img importedEmbed-img"></img></li> <li>Select <strong>Migrate</strong> On-Premises Server.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/61BLZ7ZDQIPU/mceclip2.png" alt="mceclip2.png" width="198" height="102" class="embedImage-img importedEmbed-img"></img></li> <li> <strong>Download</strong> the <strong>Migrator</strong> tool.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/BNQDD7ZNXUWN/mceclip3.png" alt="mceclip3.png" width="187" height="35" class="embedImage-img importedEmbed-img"></img></li> <li>Copy the VaultMigrator.zip to the AuthAnvil On-Premises Server. </li> <li>Decompress VaultMigrator.zip on the local drive.<br><strong>Note</strong>: Using a network share or LANCACHE will not allow the import to complete.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/XC8N0LIVEKMK/mceclip4.png" alt="mceclip4.png" class="embedImage-img importedEmbed-img"></img></li> <li>Run VaultMigrator.exe<br>Note: We recommend that elevate the command when this is run (Run as Administrator).<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/9TXCP5KON8CA/mceclip5.png" alt="mceclip5.png" width="377" height="210" class="embedImage-img importedEmbed-img"></img><br><strong>Note: </strong>Database name should be AuthAnvilPasswordServer.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/KSAH9MG3WGCQ/mceclip6.png" alt="mceclip6.png" class="embedImage-img importedEmbed-img"></img><strong><br>Note</strong>: If you installed AAOP using a default installation this would normally have used Windows Authentication. If you were not the original installation admin you might need to review your SQL user access groups.<br><strong>Note</strong>: SQL Server\Instance. If you have installed AAOP 2FA/Auth Manager then check the web.config located in C:\Program Files\Scorpion Software\AuthAnvil\AuthAnvilSAS on Line 27 you should see something like <add key="DBServer" value="dbserver.\authanvil" />.<br>Note: The AAOP Password Server web.config can be located in C:\Program Files\Scorpion Software\AuthAnvil Password Server\AAPS<br><strong>Note</strong>: It is optional to include personal Vaults, they are not required for the migration</li> <li>Once you have entered the above select Start Migration.</li> <li>Migrator tool will export to \\VaultMigrator\zip\</li> <li>In Passly > Password Server select <strong>Next</strong>.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/6928N2460W0C/mceclip7.png" alt="mceclip7.png" width="105" height="44" class="embedImage-img importedEmbed-img"></img></li> <li>Drag the compressed folder into the field.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/XS9KD74F5714/mceclip8.png" alt="mceclip8.png" class="embedImage-img importedEmbed-img"></img></li> <li>Select <strong>Next</strong> to import the selected file.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/0YI8TMOR9L7L/mceclip9.png" alt="mceclip9.png" class="embedImage-img importedEmbed-img"></img></li> <li>Enter the Secret Key from the tool on the AAOP server.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/4BNIY1IAWXNJ/mceclip10.png" alt="mceclip10.png" width="291" height="89" class="embedImage-img importedEmbed-img"></img><img src="https://us.v-cdn.net/6032361/uploads/migrated/GIF0OCPNU8I6/mceclip11.png" alt="mceclip11.png" width="358" height="180" class="embedImage-img importedEmbed-img"></img></li> <li>Select <strong>Next</strong>,<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/ZKFHH779NMZI/mceclip12.png" alt="mceclip12.png" class="embedImage-img importedEmbed-img"></img></li> <li>Select the Initial Admin group.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/I22KMCZW7YCT/mceclip13.png" alt="mceclip13.png" class="embedImage-img importedEmbed-img"></img></li> <li>Select <strong>Migrate Passwords</strong>.</li> <li>The process will complete in the background from here.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/AWPU6YBB4O6N/mceclip17.png" alt="mceclip17.png" class="embedImage-img importedEmbed-img"></img></li> </ol><p> </p> <p> </p> <p> </p> <p> </p> <p> </p> </article> </main>