Migrating SP to a new server - Any gotchas?

[Mike Flynn]

We will be sunsetting our current SP servers and spinning up a new set with updated HW.  I plan to do a new install of 2.5.2/64 IIS7 (updating from my older 2.3.1).

Once installed I plan to just copy my etc folder from the old box to the new.  In testing with a VM I see there are some config changes.  I plan to apply the following chages to my config:

<SessionCache type="StorageService" StorageService="mem" cacheAllowance="3600" inprocTimeout="900" cleanupInterval="900"/>


For the next section I will put the existing XML into a file and use the file instead of the inline like so:

     <!-- Security policies you shouldn't change unless you know what you're doing. 
     <SecurityPolicies>
         <Policy id="default" validate="false">
            <PolicyRule type="MessageFlow" checkReplay="true" expires="60"/>
             <PolicyRule type="ClientCertAuth" errorFatal="true"/>
             <PolicyRule type="XMLSigning" errorFatal="true"/>
             <PolicyRule type="SimpleSigning" errorFatal="true"/>
         </Policy>
     </SecurityPolicies>-->

    <SecurityPolicyProvider type="XML" validate="true" path="security-policy.xml"/>

And add the cookieProps...

         <Sessions lifetime="28800" timeout="3600" handlerURL="/Shibboleth.sso" handlerSSL="true" checkAddress="false" idpHistory="false" cookieProps="https" idpHistoryDays="7">


Are there any other gotchas that I should look out for here in this process?

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130712/e3b91a90/attachment.html