How to upgrade to the WiKID Strong Authentication Server 3.0

The upgrade from 2.0 to 3.0 is fairly significant, encompassing a number of changes. We recommend users configure a new server with the WiKID Strong Authentication 3.0 Enterprise server and migrate information from 2.0 to the 3.0 server. All commands in this documentation are run from the 3.0 server to minimize the impact to your production two-factor authentication server. We will copy the database over from the 2.0 server so you will not have to re-configure your users.

From the new server, create a tunnel to the old server: (192.168.2.11)

# ssh -L 3333:192.168.2.11:5432 root@192.168.2.11

Stop WiKID:

# wikidctl stop

Start postgres:

# service postgresql start

Su to the user postgres:

# su - postgres

Create a copy of the 2.0 database

$ pg_dump -h localhost -U postgres -p 3333 wikid > remotedump.sql

Enter the postgresql command line:

$ psql

The prompt will now look like:

-bash-3.1$ psql
Welcome to psql 8.1.9, the PostgreSQL interactive terminal.

Type:  \copyright for distribution terms
       \h for help with SQL commands
       \? for help with psql commands
       \g or terminate with semicolon to execute query
       \q to quit

We need to drop the existing WiKID Database and re-create it:

postgres=# drop database wikid;

postgres=# create database wikid;

Ctrl-D to exit postgres and import the 2.0 database to the 3.0 WiKID Server:

$ psql wikid < remotedump.sql

Ctrl-D to get back to the root prompt and start WiKID:

Copy the certificates from the old server to the new:

# scp root@192.168.2.11:/opt/WiKID/private/* /opt/WiKID/private/

# wikidctl start

Now login to the WiKIDAdmin on the new server and validate that everything is visible without errors. Once you feel comfortable, you can run wikidctl setup and change the IP address of the 3.0 server to that of your 2.0 server. Obviously, the domains will not work until that step is complete. We recommend that you be prepared to fall back to the old 2.0 server in case you have issues with the upgrade. One way would be to simply turn off the network on the old box so that you can quickly turn it back on.

Thank you for choosing WiKID for your two-factor authentication needs!