Migration of SSPR from FIM 2010 R2 to MIM? RRS feed

  • Question

  • I have an instance of FIM 2010 R2 that was created solely for password reset. There was a script from TechNet that created the SSPR site. Once that was done I customized a little in order to facilitate OTP sending to email.

    Now, the problem is how do I migrate the whole user base and their password registration data from FIM 2010 R2 to MIM. Has anyone done that? Any guidance would be very appreciated. Thanks!

    Tuesday, April 17, 2018 3:10 PM

All replies

  • The registration data is stored in the FIM Service database. So when you do an upgrade it will bring the registration info into MIM. You can do that by installing MIM on another server and pointing to the database. You will need the encryption keys from Sync Service.

    Look at this article and this thread

    David Lundell, Get your copy of FIM Best Practices Volume 1

    Tuesday, April 17, 2018 6:45 PM
  • Thank you. What about the migration of the SSPR component itself? I had used the quick start to install sspr in fim 2010 r2 .
    Tuesday, April 17, 2018 9:19 PM
  • Huck (what a familiar name),

    You could just run the install on that same server to do an in-place upgrade and that brings along all of the config and components. 

    If you are installing to a new server you would need to select the same components, and point to the fim sync database and then the fim service database. That will bring over the configs. You may need to adjust a couple of settings during install based on different host names.

    Which approach do you think to take?

    David Lundell, Get your copy of FIM Best Practices Volume 1

    Tuesday, April 17, 2018 10:15 PM
  • Thanks.

    I want to install MIM in a different server. Right now FIM is on 2008 R2 sp1. There are three servers involved currently. One is backend database server, another FIM service/sync/sharepoint foundation 2010 server, and the third password reset/registration.

    I want to migrate the latter two to windows 2012 R2 or windows 2016. So, an in-place upgrade is not an option for me.

    Wish they had a better How-To for the migration scenario because a lot of folks out there do need to move to higher version of the OS eventually.

    Wednesday, April 18, 2018 3:15 PM
  • When you install MIM Sync on a new server and point it at the FIM Sync DB it will upgrade the DB. Then when you install MIM Service and Portal on a new server it will upgrade the FIM DB if you point to it. Then when you install MIM SSPR portals on a new server it will be pointed towards the new MIM Server which in turn will point to the upgraded database containing the registrations.

    As far as the docs go it would be nice to have a little more guidance. Nonetheless, if you follow these steps with a few modifications it should work (here are the high level steps):

    Get all of the perquisites ready on the new MIM Server and the new MIM SSPR server. Including installing SharePoint!

    Backup all of the related databases! This is your ticket out if something is wrong.

    Backup the Sync encryption keys, Stop the FIM Sync service, copy the encryption keys to the new Sync Server and then install MIM Sync on the new server and point it to the existing database. This will upgrade the existing FIM Sync database.

    Then install the MIM Service and Portal on the new server. Again point to the existing FIM Service database. This will upgrade it. If you use a different name for the MIM Service, later you will need to update the FIM MA connection info in the MIM Sync Service Manager (miisclient). 

    Then Install the MIM Password Registration and Reset Portals on its new server and point it at the new MIM Server.

    Ideally you would do this in a lab environment first. 

    David Lundell, Get your copy of FIM Best Practices Volume 1

    Thursday, April 19, 2018 5:52 AM
  • I have just published a video series on how I would upgrade from FIM to MIM 2016 SP1, side by side allowing users to continue accessing the old SSPR Portal until the new one is ready.  Their is 5 videos, and its just under an hour long.  

    Hope this helps,


    Thursday, April 19, 2018 12:33 PM