(r8) MigratingYourJazzAuthorizationServerFromDerbyToAnEnterpriseDatabase < Deployment

Engineering Lifecycle Management Wiki - Deployment

Community information and contribution guidelines

~~EditAttach~~Printable

TWiki > Deployment Web > DeploymentMigratingAndEvolving > MigratingYourJazzAuthorizationServerFromDerbyToAnEnterpriseDatabase

Revision 8 - 2026-06-16 - 20:00:21 - KotTontranakwong

<div id="header-title" style="padding: 10px 15px; border-width:1px; border-style:solid; border-color:#FFD28C; background-image: url(<nop>https://jazz.net/wiki/pub/Deployment/WebPreferences/TLASE.jpg); background-size: cover; font-size:120%">
---+!! Migrating Your Jazz Authorization Server From Derby To An Enterprise Database  
%DKGRAY% Authors: Main.DavidNoecker, Main.MirkoHartwig <br>
Build basis: Jazz Authorization Server 6.0.x+ <br>
Updated for: Jazz Authorization Server 7.1+
%ENDCOLOR%</div></sticky>

<!-- Page contents top of page on right hand side in box -->
<sticky><div style="float:right; border-width:1px; border-style:solid; border-color:#DFDFDF; background-color:#F6F6F6; margin:0 0 15px 15px; padding: 0 15px 0 15px;">
%TOC{title="Page contents"}%
</div></sticky>

<sticky><div style="margin:15px;"></sticky>

This document describes the procedure for preparing and migrating the Jazz Authentication Server (JAS) database from one database vendor to another.
---++++ Prerequisites
   * Administrative credentials for all Jazz applications and JAS
   * All applications are operational prior to starting the procedure
   * Target database (Db2 or Oracle) is available
   * Adequate backups are taken for JAS and all Jazz application repositories
<br>

---+++Migrating the Jazz Authentication Server (JAS) Database Between Vendors
<br>
---++++ *Step 1: Prepare JAS SSO migration data (applications online)*
While all servers are running, [[https://www.ibm.com/docs/en/engineering-lifecycle-management-suite/lifecycle-management/7.1.0?topic=reference-preparejsassomigration][generate SSO migration]] data for each application. <br>
You must start with JTS, followed by all other Jazz applications (for example, CCM, RM, QM).
<br><br>
On the JTS server, run:
<verbatim>./repotools-jts.sh -prepareJsaSsoMigration adminUserId=<your Admin User> adminPassword=<your Admin Password> repositoryURL=https://[public-url]:[port]/jts  toFile=JTS_output.json </verbatim>

Repeat this step for each additional application using the corresponding repotools-xxx.sh command.
Example for CCM:
<verbatim>./repotools-ccm.sh -prepareJsaSsoMigration adminUserId=<your Admin User> adminPassword=<your Admin Password> repositoryURL=https://[public-url]:[port]/ccm toFile=CCM_output.json </verbatim>

*Important:* Ensure a .json file is generated for every installed application. Use the correct repotools command for each application.

---++++ *Step 2: Stop Jazz Authentication Server (JAS)*
Shut down the JAS server before changing the database configuration.
<br><br><br>

---++++ *Step 3: Configure JAS to use the new database vendor*
Update the JAS database configuration to point to the new database vendor by following the appropriate IBM documentation:
   * *Db2:* [[https://www.ibm.com/docs/en/engineering-lifecycle-management-suite/lifecycle-management/7.1.0?topic=database-setting-up-jazz-authorization-server-db2][Setting up a Jazz Authorization Server Db2 database]]
   * *Oracle:* [[https://www.ibm.com/docs/en/engineering-lifecycle-management-suite/lifecycle-management/7.1.0?topic=database-setting-up-jazz-authorization-server-oracle][Setting up a Jazz Authorization Server Oracle database]]
This includes updating the appConfig.xml file and any required JDBC settings.
<br><br><br>

---++++ *Step 4: Start JAS and verify database connectivity*
1. Start the JAS server. <br>
2. Verify that JAS can connect to the new database by accessing the following URL:
<verbatim>https://<jas-host>:<port>/oidc/endpoint/jazzop/registration</verbatim>

A response similar to { "data": [] } indicates that JAS is running and connected successfully to the new database.

---++++ *Step 5: Stop all Jazz applications*
Stop all Jazz applications (JTS, CCM, RM, QM, and others).
<br>
Note: Applications must be offline to run the migration commands.
<br><br><br>

---++++ *Step 6: Migrate SSO data to the new JAS database*
[[https://www.ibm.com/docs/en/engineering-lifecycle-management-suite/lifecycle-management/7.1.0?topic=reference-migratetojsasso][Migrate SSO data.]] Start with JTS, and run:
<verbatim> ./repotools-jts.sh -migrateToJsaSso authServerUrl=https://[jas-url]:9643/oidc/endpoint/jazzop authServerUserId=<your Admin User> authServerPassword=<your Admin Password> 
jtsSsoDataFile=JTS_output.json </verbatim>
Migrate each remaining application.
Example for CCM:
<verbatim>./repotools-ccm.sh -migrateToJsaSso authServerUrl=https://[jas-url]:9643/oidc/endpoint/jazzop authServerUserId=<your Admin User> authServerPassword=<your Admin Password> 
jtsSsoDataFile=JTS_output.json appSsoDataFile=CCM_output.json</verbatim>
<br><br>

---++++ *Step 7: Restart all applications*
Start all servers, beginning with JTS, followed by the remaining Jazz applications.
<br><br><br>

---++++ *Step 8: Validate application availability*
Verify that all applications start successfully and that users can authenticate through JAS.
<br><br><br>

---++++ *Step 9: Re-register LQE, LDX, and Report Builder (if required)*
After migration, Lifecycle Query Engine (LQE), Lifecycle Query Engine Data Index (LDX), and Report Builder (JRS) may not be available for SSO.
If necessary, unregister and re-register these applications to re-enable JAS SSO:
   * *LQE:* [[https://www.ibm.com/docs/en/engineering-lifecycle-management-suite/lifecycle-management/7.1.0?topic=applications-enabling-lifecycle-query-engine-single-sign][Enabling Lifecycle Query Engine for Jazz Security Architecture single sign-on]]
   * *Report Builder:* [[https://www.ibm.com/docs/en/engineering-lifecycle-management-suite/lifecycle-management/7.1.0?topic=applications-enabling-report-builder-single-sign][Enabling Report Builder for Jazz Security Architecture single sign-on]]
<br><br>




For now, this procedure has been tested internally and at multiple client sites.  Also see: [[https://jazz.net/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/463705][Defect 463705: Documentation on Jazz Authorization Server DB configuration missing in Knowledge Centre]].



---+++++!! Related topics: [[https://jazz.net/help-dev/clm/index.jsp?re=1&topic=/com.ibm.jazz.install.doc/topics/c_jsasso_jas_deploy_start.html&scope=null][Deploying and starting Jazz Authorization Server]], [[PerformanceClusteredJAS][Setting up a cluster of Jazz Authorization Servers]]

---+++++!! External links:          

   * [[https://www.ibm.com][IBM]]

---+++++!! Additional contributors: Main.ShubjitNaik, Main.PaulEllis, Main.TobiasBurkhardt

<sticky></div></sticky>

Copyright © by IBM and non-IBM contributing authors. All material on this collaboration platform is the property of the contributing authors.
Contributions are governed by our Terms of Use. Please read the following disclaimer.
Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.