# For detailed information on the Import/Export Utility, see # Hyperion Security Administration Guide. # URI of CSS.xml.

# For export operations, use the URI of the CSS.xml belonging to the Shared Services that controls the source Native Directory. # For import operations, use the URI of the CSS.xml belonging to the Shared Services that controls the target Native Directory. # Example, http://MyServer:<port>/framework/getCSSConfigFile or file:/C:/Hyperion/CSS.xml importexport.css=file:/C:/Hyperion/deployments/Tomcat5/SharedServices9/config/CSS.xml # Name of the machine that hosts Shared Services. # For export operations, use the server name where the source Shared Services is running. # For import operations, use the server name where the target Shared Services is running. importexport.cmshost=localhost # Shared Services port. # Be sure to use the secure port, if Shared Services is deployed to use SSL communication. # For export operations, use the port where the source Shared Services is running. # For import operations, use the port where the target Shared Services is running. importexport.cmsport=58080 #import export operations # The Native Directory user account that is to be used for the operation typically the admin user # For export operations, use an administrator's account from the source system. # For import operations, use an administrator's account from the target system. importexport.username=admin # Password. Type password in clear text. After the first run, the Import/Export Utility encrypts this password. importexport.password={CSS}MRcYv323uzxGr8rFdvQLcA== # Set this property to false if you do not want to see trace information in the Console window. importexport.enable.console.traces=true # Name and location of trace log file for detailed errors. File is not created if you do not provide a valid path and file name. importexport.trace.events.file=C:/Hyperion/common/utilities/CSSImportExportUtility/importexp ort/trace.log # Name and location of error log file. File is not created if you do not provide a valid path and file name. importexport.errors.log.file=C:/Hyperion/common/utilities/CSSImportExportUtility/importexport /errors.log

# Locale (two-letter language code) to use for the operation. # If data in the specified locale is not available, data in # the default locale of the server where the utility is run is exported or imported. # See Hyperion Security Administration Guide for a list of supported locales. importexport.locale=en # Set this property to true if you are using an SSL connection for the operation. Valid values are true or false importexport.ssl_enabled=false # EXPORT OPERATIONS # Update this section to export data from the source Native Directory into a file. ######## # The format in which the export file is to be created. # Must match the format of the file specified for export.file property. Valid values are csv and xml export.fileformat=xml # Location of the file into which the data is to be exported. # Must match the format of the file specified for export.fileformat property. # For XML and CSV file formats, see Hyperion Security Administration Guide. export.file=C:/Hyperion/common/utilities/CSSImportExportUtility/importexport/export.xml # Set this property to false if you do not want to export internal identities. # Provisioning information becomes stale if this value is set to false. export.internal.identities=true # Set this property to false if you do not want to export the encrypted passwords of the native users. export.native.user.passwords=true # Set this property to false if you want to export only a subset of the provisioning data. # If this property is set to false, you must specify export.projectnames AND export.applicationnames # OR export.provisioning.apps to select the subset of data to export. export.provisioning.all=true # Set this property to true if you want to export delegated lists. export.delegated.lists=false # Filter to use to select users for export. Use * as the filter to export all users. # You can use regular expressions using * as the wildcard. export.user.filter=*@Native Directory

# Filter to use to select groups for export. Use * as the filter to export all groups. # You can use regular expressions using * as the wildcard. export.group.filter=*@Native Directory # Filter to use to select roles for export. Use * as the filter to export all roles. # You can use regular expressions using * as the wildcard. # export.role.filter=* # A comma-separated list of product types for which roles are to be exported. # Use * as the filter to export all products # Must be specified as product code-product version; for example, HAVA-9.3.1. # See Hyperion Security Administration Guide for a list of product codes. # export.producttype=HUB-9.2.0 # Applications from which provisioning data is to be exported separated by commas. # Application names must be in (in (projectname=application name) format. # export.provisioning.apps=(HUB=Global Roles) # Do not use this property. Use export.provisioning.apps OR export.provisioning.all=true instead # Provided in this release for backward compatibility # export.projectnames=HUB # Do not use this property. Use export.provisioning.apps OR export.provisioning.all=true # Provided in this release for backward compatibility # export.applicationnames=Global Roles # IMPORT OPERATIONS # Update this section to validate an import file or to import data into a target Native Directory. # The format of the import file. # Must match the format of the file specified for import.file property. import.fileformat=xml # Name and location of the file to import or validate. # You can import or validate XML and CSV files. # For XML and CSV file formats, see Hyperion Security Administration Guide # Must match the format of the file specified for import.fileformat property. import.file=C:/Hyperion/common/utilities/CSSImportExportUtility/importexport/import.xml # The import operation to perform. # Options are: CREATE, UPDATE, CREATE/UPDATE and DELETE import.operation=create/update

# Name and location of the file where failed import transactions are to be recorded. # File is not created if you do not provide a valid path and file name. import.failed.operations.file=C:/Hyperion/common/utilities/CSSImportExportUtility/importexpor t/failed.xml # The maximum number of allowable errors during the import operation. # The import operation aborts after the limit is reached. Default is 0 which means no limits on errors. import.maxerrors=0

1) In the Shared Services server machine, find the utility cssimportexport.zip located under: %HYPERION_HOME%\common\utilities\CSSImportExportUtility. 2). Unzip the file named cssimportexport.zip in the current location. 3) Create two folders one called "files" and another called "logs" under the directory of %HYPERION_HOME%\common\utilities\CSSImportExportUtility\cssimportexport\importexport 4) Go to the "....CSSImportExportUtility\cssimportexport\importexport\samples" folder of the utility and copy the importexport.properties file to the root folder of the utility, "....CSSImportExportUtility\cssimportexport\importexport". 5) Configure the importexport.properties file: a. Open the file importexport.properties file under the "....CSSImportExportUtility\cssimportexport\importexport" directory. Each option of the file is fully documented. The file contains three sections, Global, Export and Import section. The Global section defines the Shared Services environment that you want to import from or load into. The Export section defines the export options. Import section defines import options. b. Configure the location of the CSS file. The URL is the best method to define it. Ensure, that the location displays the correct syntax as in: importexport.css=http://SERVERNAME:58080/interop/framework/getCSSConfigFile c. Configure the Shared Services host and port number as follows: importexport.cmshost=SERVERNAME

importexport.cmsport=58080 d. Configure the administrator account that will be used as the default admin account that has all of the Shared Services privileges to export and load: importexport.username=admin e. Configure the password for the administrator account. The password is typed in clear text but the utility will encrypt the password in the file when you execute the utility. Clear Text importexport.password=Password f. Configure the location of the trace log. Ensure to define path locations with the use of forward slashes, similar to Unix path convention. For example: importexport.trace.events.file=%HYPERION_HOME%\common\utilities\CSSImportExportUtility\c ssimportexport\importexport\logs\trace.log g. Configure the location of the error log. importexport.errors.log.file=%HYPERION_HOME%\common\utilities\CSSImportExportUtility\cssi mportexport\importexport\logs\errors.log h. Configure the file format, in the EXPORT section. In this example, csv format will be used. export.fileformat=csv i. Configure the location of the export file. Ensure to include the file extension. export.file=%HYPERION_HOME%\common\utilities\CSSImportExportUtility\cssimportexport\imp ortexport\files\export.csv j. Accept all other options in the file. This will produce a file that you will need in order to move the provisioning information to a target environment. k. Do not change the User or Group filter values. This will search all external providers and extract all users and groups. This process can be time-consuming. The external users will be displayed with the default options as both members of native groups and if they are directly provisioned to the applications.

l. Save the file as export_source.properties 6) Optional: Configure the CSSExport.bat file. If there are available memory resources in the HSS server, then the amount memory can be increased when performing the export. In the example below, 1024m represents 1GB of memory, please do not increase the setting beyond 1024m. a. Go to the directory: =%HYPERION_HOME%\common\utilities\CSSImportExportUtility\cssimportexport\importexport b. Open the CSSExport.bat file using a text editor such as Notepad c. Change the following line: "%JAVA_HOME%\bin\java" -cp %CLASSPATH com.hyperion.css.exchange.CommandUtility -ef % 1 to "%JAVA_HOME%\bin\java"-Xmx 1024m-cp %CLASSPATH%

com.hyperion.css.exchange.CommandUtility -ef % 1 d. Save and close the file. 7) Execute the CSSexport utility. a. Open a command prompt and change the directory location to: %HYPERION_HOME%\common\utilities\CSSImportExportUtility\cssimportexport\importex port b. From the command prompt location set in step G2 type the command: CSSexport export_source.properties Hit Enter and the operation will execute. The time for completion will vary based on the size of the environment.

1) Copy your load file that you prepared in the last section to: %HYPERION_HOME%\common\utilities\CSSImportExportUtility\cssimportexport\importexport\fil es\import.csv

2) Copy the file %HYPERION_HOME%\common\utilities\CSSImportExportUtility\cssimportexport\importexport\ex port_source.properties to import_target.properties. 3) Open and edit the GLOBAL section of the import_target.properties file in a text editor such as Notepad. a. The first option to configure is the location of the css.xml file. The web URL is the easiest and most dynamic method to define it. Here is an example of the correct syntax of the target server:

importexport.css=http://TARGETSERVER:58080/interop/framework/getCSSConfigFile

b. The next part is to define the Shared Services host this will be the same server as your url above.

importexport.cmshost=TARGETSERVER Same for the port importexport.cmsport=58080

c. Define an administrator account I would use the default admin account because it has all of the necessary Shared Services provisioning to extract and load

importexport.username=admin

d. Define the password. You type the password here in clear text and when you run the utility it will encrypt the password in the file.

Clear Text importexport.password=Password

Encrypted importexport.password={CSS}MRcYv323uzxGr8rFdvQLcA==

e. Define the location of the trace log. When defining logs its important to use the Unix slash / convention method, for example:

importexport.trace.events.file=%HYPERION_HOME%\common\utilities\CSSImportExportUtility\c ssimportexport\importexport\logs\trace.log f. Define the location of the error log. importexport.errors.log.file=%HYPERION_HOME%\common\utilities\CSSImportExportUtility\ cssimportexport\importexport\logs\errors.log 4) Edit the IMPORT section in the import_target.properties file. You can ignore the export section of the file and move directly to import. a. Change the import file format to csv import.fileformat=csv b. Define the file that you will be using as your load file. This is the file you first copied in the import section. import.file=%HYPERION_HOME%\common\utilities\CSSImportExportUtility\cssimportexport\imp ortexport\files\import.csv c. Verify that your update option is set to CREATE/UPDATE. This will update the information if it already exists or create the new user or group.

import.operation=CREATE / UPDATE

d. Specify a failed import operations file. import.failed.operations.file=%HYPERION_HOME%\common\utilities\CSSImportExportUtility\cssi mportexport\importexport\logs\failed.csv e. Save and close the import_target.properties file. 5) Execute the CSSIMPORT utility.

a. Open a windows command prompt and navigate to the following directory: %HYPERION_HOME%\common\utilities\CSSImportExportUtility\cssimportexport\importexport b. From the above location set in the windows command prompt, type the command: CSSimport export_target.properties c. Hit enter. d. The import process should execute at this point and the time for completion will vary based on the size of your environment. If there are any errors, please refer to the failed.csv file defined under the %HYPERION_HOME%\common\utilities\CSSImportExportUtility\cssimportexport\importexpo rt\logs directory.