locked
Upgrade ILM 2007 to FIM 2010 RRS feed

  • 質問

  • I am working on an oppurtunity where in we have 2 forest. One has Exchange Server 2003 and other has Exchange Server 2007. We are using ILM 2007 to do GAL synchronization (galsync.dll). The GALSync.dll has been customized to a certain extent. The Exchange Server 2003 forest will be upgraded to Exchange Server 2010 and also the ILM 2007 will be upgraded to FIM 2010.

    I will really appreciate if anyone can help me in knowing as how ILM 2007 can be upgraded to FIM 2010. Will it be an inplace upgrade or need to migrate from one server to another server. And also what all things I need to take care so that the customized GalSync.dll should also keep on working as it is.

    Regards/Harpreet S

    2011年10月13日 6:44

回答

  • Hi,

    Please check this post as Bob Tucker explain exactly the upgrade path from ILM 2007 to FIM 2010:

    http://social.technet.microsoft.com/Forums/en-AU/ilm2/thread/b47c5545-b066-45bd-9e21-9601f5a7fa86

    "The upgrade path from ILM 2007 to FIM 2010 involves several steps, but generally will not be terribly difficult. You would need to accomplish the following:

    1 - Stand up a test environment that represents your production environment
    2 - Upgrade your SQL database to 2008 if not already there
    3 - Recompile all code using .Net 3.5 (Visual Studio 08)
    4 - Perform complete end to end testing
    5 - Verify you have x64 versions for any third party apps required on the ILM server (Oracle client, Notes client, etc)
    6 - Build Windows 2008 x64 and install FIM 2010 sync engine - pointing to the SQL 2008 version of the ILM database
    7 - Perform complete end to end testing
    8 - Consider installing FIM 2010 portal
    9 - Consider migrating some of the codeless capabilities and group management to FIM 2010
    10 - Perform complete end to end testing

    As you can see from above - FIM 2010 can make use of your existing design, but it is not a point and click upgrade (one is 32 bit only, the other 64 bit only).

    Timing of the release of FIM 2010 can best be answered by some of the MS guys - they have the latest information

    As for which one to use - if you are just now getting into the process of implementing an identity management solution, you should start with determining systems involved, gathering requirements, developing a design, etc. If you absolutely require the use of a portal to allow user participation, then you may want to wait on FIM 2010 (or look at designing your own); if you are looking to deploy in the immediate future, you will have to decide whether or not you can use release candidate software in a production environment. With the release of RC1 of FIM 2010, you may be able to participate in TAP/RDP programs if desired.

    As you can see from the migration path; if you decide to start with ILM 2007, you can still migrate the capabilities to FIM 2010 without too much work, though it may involve some rework to move some of the design into the portal.

    Bob T"

     

    Regards

    Andre

    2011年10月13日 10:43
  • Thanks Andre for the reply.

    After reading the blog, it seems they are suggesting that if we have FIM 2010, then the softwares whould also be 64-bit. Does it mean that Exchange Server 2007 should also be 64-bit.

    Regards/Harpreet s

    2011年10月13日 18:00
  • Hi Harpreet,

     

    FIM 2010 can only be installed on a 64bit Windows Server 2008 and with SQL 2008. Your Exchange server 2007 does not have to be 64-bit, but you will have to install teh 64-bit EMC on the FIM SYnc Server.

     

    Regards

    Andre

    • 回答としてマーク hp.harpreet 2011年10月20日 9:00
    2011年10月16日 21:38

すべての返信

  • Hi,

    Please check this post as Bob Tucker explain exactly the upgrade path from ILM 2007 to FIM 2010:

    http://social.technet.microsoft.com/Forums/en-AU/ilm2/thread/b47c5545-b066-45bd-9e21-9601f5a7fa86

    "The upgrade path from ILM 2007 to FIM 2010 involves several steps, but generally will not be terribly difficult. You would need to accomplish the following:

    1 - Stand up a test environment that represents your production environment
    2 - Upgrade your SQL database to 2008 if not already there
    3 - Recompile all code using .Net 3.5 (Visual Studio 08)
    4 - Perform complete end to end testing
    5 - Verify you have x64 versions for any third party apps required on the ILM server (Oracle client, Notes client, etc)
    6 - Build Windows 2008 x64 and install FIM 2010 sync engine - pointing to the SQL 2008 version of the ILM database
    7 - Perform complete end to end testing
    8 - Consider installing FIM 2010 portal
    9 - Consider migrating some of the codeless capabilities and group management to FIM 2010
    10 - Perform complete end to end testing

    As you can see from above - FIM 2010 can make use of your existing design, but it is not a point and click upgrade (one is 32 bit only, the other 64 bit only).

    Timing of the release of FIM 2010 can best be answered by some of the MS guys - they have the latest information

    As for which one to use - if you are just now getting into the process of implementing an identity management solution, you should start with determining systems involved, gathering requirements, developing a design, etc. If you absolutely require the use of a portal to allow user participation, then you may want to wait on FIM 2010 (or look at designing your own); if you are looking to deploy in the immediate future, you will have to decide whether or not you can use release candidate software in a production environment. With the release of RC1 of FIM 2010, you may be able to participate in TAP/RDP programs if desired.

    As you can see from the migration path; if you decide to start with ILM 2007, you can still migrate the capabilities to FIM 2010 without too much work, though it may involve some rework to move some of the design into the portal.

    Bob T"

     

    Regards

    Andre

    2011年10月13日 10:43
  • Thanks Andre for the reply.

    After reading the blog, it seems they are suggesting that if we have FIM 2010, then the softwares whould also be 64-bit. Does it mean that Exchange Server 2007 should also be 64-bit.

    Regards/Harpreet s

    2011年10月13日 18:00
  • Hi Harpreet,

     

    FIM 2010 can only be installed on a 64bit Windows Server 2008 and with SQL 2008. Your Exchange server 2007 does not have to be 64-bit, but you will have to install teh 64-bit EMC on the FIM SYnc Server.

     

    Regards

    Andre

    • 回答としてマーク hp.harpreet 2011年10月20日 9:00
    2011年10月16日 21:38
  • Thanks Andre.

    Ok, I have one more doubt and it is like little urgent and very critical. The GALSync.dll which the customer has on ILM 2007 has also been confugured to certain extent. Some additional features have been added to the GALSync.dll. Now my question is that how can I retain the customization while I move it to FIM 2010.

    And after upgrade following would be the scenario.

    Exchange Server 2010 - 64 bit, FIM 2010 - 64 bit, Exchange Server 2003 - 32 bit. What settings I need to have to make this working.

    Thanks and Regards/Harpreet

    2011年10月18日 16:24
  • Hi Harpreet,

     

    Regarding if you will keep the customization while you move it is yes, you will have to copy the code to teh FIM server and recompile it. Just double check that the code which is in place is accomadated within the configuration of your Management Agents. i.e: where you use certain rules extension for deprovisioning, or you use rules extension for the attribute flow, etc.

    You can check "Exchange Provisioning using ILM 2007 and FIM 2010" - http://technet.microsoft.com/en-us/magazine/ff472471.aspx for ho how to provision to Exchange 2007 and 2010.

    Regards

    Andre

    2011年10月19日 13:31