Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

After migrating the Policy Manager Server to a new server, the clients stop receiving the policy update

Issue:

After migrating the Policy Manager Server to a new server, the managed Client Security or Server Security hosts stop receiving the policy updates. How to make the managed hosts connect to the new Policy Manager Server to receive the policy update again?

Resolution:

In case the old Policy Manager Server is available, do the following:

Export the admin key pairs (admin.pub & admin.prv) from the old Policy Manager Console

  1. Log in to the Policy Manager console at old server
  2. Choose Tools
  3. Choose Server configuration
  4. Choose Keys and Export

After this import the admin key pairs (admin.pub & admin.prv) to the new Policy Manager Console

  1. Log in to the new Policy Manager Console
  2. Choose Tools
  3. Choose Server configuration
  4. Choose Keys and Import

Change the management server address in the old Policy Manager Console to use the hostname/IP of the new Policy Manager Server, and distribute the policy:

  1. Go to the old Policy Manager Console
  2. Select a policy domain from the domain tree
  3. Go to the Settings tab
  4. Navigate to Windows > Centralized management
  5. Enter in the Policy Manager Server address field the new policy manager's server address.
  6. Distribute the policy (Ctrl + D)

The hosts will start connecting using the new management server address once the hosts picked up the new policy from the old Policy Manager Server.

Also make sure on the new Policy Manager server that you have allowed inbound HTTP and HTTPS traffic from the firewall.  

In the event that a small number of hosts are affected and not all hosts, try to reinstall the Client Security or Server Security client on the affected hosts. You can export a new installation file from the Policy Manager Console.