2.1 Replacing the First Primary Server with the Second Primary Server

You can replace the first Primary Server in your Management Zone with an existing second Primary Server or with a new server. If you choose to replace the first Primary Server with a new server that has a different hostname and IP address, you must install ZENworks 2017 on the new server in the same Management Zone. Consequently, the new server becomes the first Primary Server.

Ensure that the ZENworks 2017 version on the new server is the same as that of the existing Primary Server. For example: If the existing Primary Server is in the ZENworks 2017 Update 1 version, then you need to install ZENworks 2017 on the new server and update this server to the ZENworks 2017 Update 1 version through the System Update process. For more information, see ZENworks System Updates Reference.

To replace the first Primary Server with the second Primary Server:

Before replacing the First Primary Server with the Second Primary Server, take a reliable backup of the following on all Primary Servers in the Management Zone:
- Content-Repo Directory: The content-repo directory is located by default in the ZENworks_installation_directory\work directory on Windows and in the /var/opt/novell/zenworks/ on Linux.
  
  Ensure that the images directory located within the content-repo directory has been successfully backed up.
- (Optional) If there are any TFTP customizations related to imaging, then back up the TFTP files. The tftp directory is located in the /srv/ folder on Linux and in the %ZENWORKS_HOME%\share\ folder on Windows.
- Certificate Authority: For detailed information on how to back up the certificate authority, see Section 1.3, Backing Up the Certificate Authority.
- Embedded Database: For detailed information on how to back up the embedded database, see in Backing Up the Embedded Sybase SQL Anywhere Database in the ZENworks Database Management Reference.
- ZENworks Server: For detailed information on how to back up the ZENworks Server, see Section 1.1, Backing Up a ZENworks Server.
NOTE:Since sandbox bundle content only syncs to the Primary Server to which the content is uploaded and is not replicated to all the Primary Servers in the zone, it is recommended that you manually sync the sandbox bundle content to other Primary Servers by using the Sync Sandbox Content to Content Servers option in ZCC. For more information, see Bundle Behavior Based on Content Replication Settings.
Ensure that all the contents of the content-repo directory of the first Primary Server are replicated to the second Primary Server.

The content-repo directory is located in the ZENworks_installation_directory\work\ directory on Windows and in the /var/opt/novell/zenworks/ directory on Linux.

(Optional) Also, copy the backed-up TFTP files to the second Primary Server. The tftp directory is located in the folder /srv/ on Linux and in the folder %ZENWORKS_HOME%\share\ on Windows.
(Conditional) If the first Primary Server has add-on images:
1. In ZENworks Control Center for the second Primary Server, click the Bundles tab, then click the Imaging bundle.
  
  The Summary tab is displayed.
2. Click Edit next to Add-on Image File.
  
  The Bundle Add-on Image wizard is displayed.
3. On the Add Image Server Address page, select the first Primary Server that is associated with the bundle, then click Remove.
4. Click Add.
5. Click next to the Servers folder to navigate through the folders until you find the second Primary Server.
6. Select the second Primary Server to display its name in the Selected list, then click OK.
7. Click Finish.
  
  The add-on image is associated with the second Primary Server, and the add-on image content is created on the second Primary Server.
8. In the Summary tab of the bundle, click the Increment Version underlined link for Version, then click Yes in the Confirm Version Increment dialog box.
(Conditional) If the first Primary Server has a ZENworks Imaging bundle, copy the bundle to the second Primary Server:
1. Manually copy all the files with the .zmg extension from the /content-repo/images directory of the first Primary Server to the /content-repo/images directory on the second Primary Server.
2. In ZENworks Control Center of the second Primary Server, click the Bundles tab, then click the Imaging bundle.
3. Click the Actions tab.
4. Click the ZENworks Image action.
  
  The Edit Action dialog box is displayed.
5. In the ZENworks Image field, click .
  
  The Server and Path Information dialog box is displayed.
6. In the Server Object, IP or DNS field, click to browse for and select the second Primary Server.
7. In the File Path on Server field, click to browse for and select the image.zmg file.
(Conditional) If the first Primary Server is a ZENworks Patch Management (ZPM) Server, then select another ZPM sever:
1. In ZENworks Control Center, click the Configuration tab in the left panel.
2. Click Patch Management.
3. Click the Subscription Service Settings Link. The Subscription Service Settings page appears.
4. In the Subscription Service Settings panel, click Reset Subscription Service. A dialog box appears requesting you to confirm your action. Click Yes to proceed further.
5. In the Start the Subscription Service field, you can select another server from multiple servers in your management zone.
6. Click Start Service.
(Conditional) If the first Primary Server is a ZENworks Subscription Server, select another subscription server.
1. In ZENworks Control Center, click the Subscribe and Share tab in the left panel.
2. In the Subscription page, click the subscription name in the Name column.
3. In the Summary page, navigate to the Schedules Panel, then click in the Subscription Server field to select any other server.
(Conditional) If you have installed a reporting server that points to the first Primary Server, then reconfigure it to point to the second Primary Server. For more information, see ZENworks Reporting Configuration in ZENworks Reporting Appliance 6.2.x Deployment and Administration Reference.
If the first Primary Server is configured as the Dedicated System Update server, then select another Dedicated System Update server:
1. In ZENworks Control Center, click Configuration tab in the left panel.
2. Under Management Zone Settings, click Infrastructure Management > System Update Settings.
3. In the Dedicated Server Settings panel, select the new server that is to be configured as the dedicated server.
If the first Primary Server has the Certificate Authority (CA) role, then move the CA role to the second Primary Server. For more information, see Moving the CA Role in ZENworks SSL Management Reference.
(Conditional) If ZCC (on the new server) Diagnostics fails to connect, execute the following commands in the order listed below,
1. novell-zenworks-configure -c MergeTruststore -Z
2. novell-zenworks-configure -c EnableJMX
3. novell-zenworks-configure -c ZenProbe
4. novell-zenworks-configure -c Start. Select the restart option to restart the services.
In the default closest server rule at the Management Zone level, move the first Primary Server as the last entry in the servers list.
1. In ZENworks Control Center, click the Configuration tab.
2. In the Management Zone Settings panel, click Infrastructure Management > Closest Server Default Rule.
3. In the Collection Servers list, select the check box next to the first Primary Server, then click Move Down until the server is the last entry in the list.
4. In the Content Servers list, select the check box next to the first Primary Server, then click Move Down until the server is the last entry in the list.
5. In the Configuration Servers list, select the check box next to the first Primary Server, then click Move Down until the server is the last entry in the list.
6. In the Authentication Servers list, select the check box next to the first Primary Server, then click Move Down until the server is the last entry in the list.
7. Click OK.
(Conditional) If you have any additional closest server rules configured, remove the first Primary Server from the rules.
1. In ZENworks Control Center, click the Configuration tab.
2. In the Management Zone Settings panel, click Infrastructure Management > Closest Server Rules.
3. Select a closest server rule, then click Edit.
  
  The Rule Construction dialog box is displayed.
4. In the Collection Servers list, select the check box next to the first Primary Server, then click Remove.
5. In the Content Servers list, select the check box next to the first Primary Server, then click Remove.
6. In the Configuration Servers list, select the check box next to the first Primary Server, then click Remove.
7. In the Authentication Servers list, select the check box next to the first Primary Server, then click Remove.
8. Click OK twice.
  
  NOTE:Remove the server entry from the Location and Network Environment server lists as well. For more information, see Adding Closest Servers to Locations.
Refresh all the devices (Primary Serves, Satellites, and managed devices) in the Management Zone so that they get the new closest server rules.
(Conditional) Move the database to another device in any of the following scenarios:
- You are using an internal ZENworks database (embedded Sybase SQL Anywhere).
- You are using an external database installed on the device hosting the first Primary Server and you do not plan to use the device after uninstalling the Primary Server.
To move the database to another device:
1. (Conditional) If you are using an external database, ensure that you have a reliable backup of the database.
2. Obtain the credentials of the database.
  
  To procure the credentials of the internal database, use one of the following commands:
  
  zman dgc -U administrator_name -P administrator_password
  
  or
  
  zman database-get-credentials -U administrator_name -P administrator_password
  
  To obtain the credentials of the external database, contact the database administrator.
3. Update the database, MasterPrimary, and DeviceCertAuth roles to the new Primary Server:
  1. Log in to the database.
  2. In the SQL editor, execute the following SQL queries to update the corresponding role entries to the new Primary Server in the zZENServerRoles table:
    
    Database Role:
    
    For Embedded Sybase:
    update zZenServerRoles set id=0x<second PS GUID>, position=(select max(position)+1 from zZENServerRoles where id=0x<second PS GUID>) where Roles='Database';
    
    For Embedded PostgreSQL:
    update zZenServerRoles set id=decode(<second PS GUID>), position=(select max(position)+1 from zZENServerRoles where id=decode(<second PS GUID>)) where Roles='Database';
    
    MasterPrimary Role:
    
    For MSSQL/Sybase:
    update zZenServerRoles set id=0x<second PS GUID>, position=(select max(position)+1 from zZENServerRoles where id=0x<second PS GUID>) where Roles='MasterPrimary';
    
    For Oracle:
    update zZenServerRoles set id=HEXTORAW(<second PS GUID>), position=(select max(position)+1 from zZENServerRoles where id=HEXTORAW(<second PS GUID>)) where Roles='MasterPrimary';
    
    For PostgreSQL:
    update zZenServerRoles set id=decode(<second PS GUID>), position=(select max(position)+1 from zZENServerRoles where id=decode(<second PS GUID>)) where Roles='MasterPrimary';
    
    DeviceCertAuth Role:
    delete from zZenServerRoles where Roles='DeviceCertAuth';
    
    For the DeviceCertAuth role, run the following command at the new server’s command prompt:
    novell-zenworks-configure -c DeviceIdentityCertConfigureAction
    
    NOTE:To obtain the second primary server GUID, in ZENworks Control Center navigate to Devices and select the server. The summary page displays the GUID number. Alternatively, log into the database and execute the following command: select * from zZENObject where name like '<<Primary Server Name>>'.
4. If the database is installed on the same device as that of the first Primary Server, move the database.
  
  Internal Sybase: For detailed information on how to move the data from an internal Sybase database to another internal Sybase database, see Moving the Internal Sybase Database from One Primary Server to Another Primary Server in ZENworks Database Management Reference.
  
  External Sybase: For detailed information on how to move the data from one external Sybase database to another external Sybase database, see Moving the Data from One External Sybase Database to another External Sybase Database in the ZENworks Database Management Reference.
  
  MS SQL: For detailed information on how to move the data to a new MS SQL database, see the MS SQL documentation. Later on, perform the steps described in Configuring the ZENworks Server to Point to the New MS SQL Database Containing Data Moved from Another MS SQL Database in the ZENworks Database Management Reference.
  
  Oracle: For detailed information on how to move the data from one Oracle database to another Oracle database, see the Oracle documentation. Later on, perform the steps described in Configuring the ZENworks Server to Point to the New Oracle Database Containing Data Moved from Another Oracle Database in the ZENworks Database Management Reference.
5. If the first Primary Server is an MDM Server, then you need to remove the MDM role from the first server and add the role to another server. All mobile devices enrolled to the first Primary Server should be re-enrolled to the new MDM Server. For more information on removing the MDM role, see Removing MDM Servers in ZENworks 2017 Mobile Management Reference. For more information on adding an MDM role to the new server, see Adding an MDM Server in ZENworks 2017 Mobile Management Reference.
Move all Satellites from the first Primary Server to another server.

For more information on how to remove the Satellites from the Server Hierarchy listing in ZENworks Control Center, see Moving a Satellite from One Primary Server to Another Primary Server in the ZENworks Primary Server and Satellite Reference.
(Conditional) Re-configure the reporting server as mentioned in Step 7.
After ensuring that all the operations in the Management Zone are working as expected, uninstall ZENworks 2017 on the first Primary Server.

For detailed information on how to uninstall ZENworks 2017, see ZENworks Uninstall Guide.
NOTE:If Multizone is configured for this server (which has got replaced with a new Primary Server) as Publisher, then all its subscribers must be updated with the new IP address and certificate of this server.
1. Log in to ZENworks Control Center (ZCC) of subscribers.
2. Navigate to Subscribe And Share > Subscriptions > <subscription_name> > Remote Server > Base URL > Edit.
3. Update the IP address with the new IP address of the Primary Server (Publisher).
To update the new certificate:
1. Navigate to Subscribe And Share > Subscriptions > <subscription_name> > Remote Server > Update Certificate.
2. Update the certificate.