Pushing Ivanti Secure Access Client Configurations Between Ivanti Servers of the Same Type

You can use the Push Configuration feature to centrally manage Ivanti Secure Access Client Connections, components, and uploaded Ivanti Secure Access Client packages. The Push Configuration feature enables you to copy all configuration settings or selected configuration settings from one Ivanti server to another Ivanti server of the same type, for example, from one Ivanti Connect Secure server to another Ivanti Connect Secure server.

The following notes apply to pushing configurations:

•You can push to a single Ivanti server or to multiple Ivanti servers in one operation. You can push up to 8 targets per push operation. You can run up to 25 push operations simultaneously. The maximum number of targets is 200. If a push to a target Ivanti server fails, the operation proceeds to the next target until all identified targets are updated. The results page displays the status and any problems encountered during the process.

•You can push to a Ivanti server that is a member of a cluster as long as the target Ivanti server is not a member of the same cluster as the source.

•Target Ivanti servers can refuse pushed configuration settings. The default is to accept.

•After an update, the target Ivanti server restarts its services. Brief interruptions might occur while the service restarts. We recommend that you push to targets when they are idle or when you can accommodate brief interruptions.

•Target Ivanti servers do not display a warning message when they receive a pushed configuration.

•The target Ivanti server automatically logs out administrators during the push process.

•The source and target Ivanti servers must have the same build version and number.

•The administrator account on the source Ivanti server must sign in to the target Ivanti server without any human intervention. For example, you cannot have dynamic credentials or multiple roles that are not merged as these both require manual interaction.

Before you use Push Configuration, you must configure your system according to the following conditions:

•You must map to the .Administrators role, thereby creating a “super administrator” with full administration privileges. Modify Authentication > Auth Servers > Administrator Server > Users settings to add yourself to the .Administrators role.

•The target Ivanti server administrator account must use static password authentication or two-factor tokens that do not use challenge/response type authentication. For example, certificates, Soft ID, and Defender Authentication are not supported. Modify Administrators > Admin Realms > [Administrator Realm] > General settings to select the proper authentication server for the administrator realm.

•Do not configure the administrator account in a way that requires the administrator to select a role to sign in to the target Ivanti server. For example, do not map a single user to multiple roles, including the Push Configuration administrator role, and then fail to merge those roles. We recommend creating an account exclusively for Push Configuration administrators to guarantee that the administrator does not need to choose a role during the sign-in process and to clearly distinguish the actions of Push Configuration administrators in your log files. Use the Administrators > Admin Realms > [Administrator Realm] > Role Mapping settings to set the appropriate role-mapping rules.

To push Ivanti Secure Access Client configurations from one Ivanti server to other Ivanti servers of the same type:

1.If you have not already done so, define the targets by selecting Maintenance > Push Config > Targets.

2.From the admin console, select Maintenance > Push Config > Push Configuration

3.In the "What to push" box, select Selected configuration to display the configuration categories.

4.Scroll down the list and expand the item labeled "Ivanti".

5.Select the Select All Configurations check box to push all Ivanti Secure Access Client configurations on this Ivanti server. Or choose none, all, or selected items from the following categories:

•Ivanti Connections: Connection sets and connections.

•Ivanti Components: Component sets.

•Ivanti Versions: Ivanti Secure Access Client packages that were uploaded to the Ivanti server.

6.Add the targets to the Selected Targets box.

7.Click Push Configuration.