Hey all… I’m still in Learning Mode, so here’s a quick question about the IGEL OS: The OS is “Read Only”, right? Meaning, we can’t Delete or Add any files to it, we can’t set a Script on it and expect it to run, etc.?
Endpoint Security Software
for the most part it‘s read only but there are options like putzing it into /wfs or a custom partition
So if we were to put a Script in /WFS that issues the Factory Reset command, I would imagine any other line in the Script AFTER the Reset line — indeed, the Script itself — would be aborted/deleted, right?
(I’m being asked to ask about this…)
Yes — I would test out your responses …
The command to reset to factory defatuls
“`reset_to_defaults“`
Right, that I got from the article you shared.. I just can’t help but think running that command aborts anything else that comes after it in the Script…
Sure… If you do things after the reset … what are you getting at?
our team is still trying to figure out a way to migrate Devices into the new environment by using commands (either in a script or a profile or something )
Okay… outline what you want to do
step by step
The script will finish as Linux will have it running in memory, and the reset won’t fully take effect until the device is rebooted.
I utilize this occasionally for quickly reseet and reboot a device.
“`echo yes|reset_to_defaults; reboot“`
However, if you configure any settings after the reset, it will be lost
But why reset? If the device gets registered to the new UMS, it should get new settings right? If they were UMS distributed profiles, they should disappear, and new ones should take over. Even old “scripts”/”files” should disappear.
Our current UMS env is 6.09, single ICG and UMS servers, embedded DB… Our Sys team has built a NEW env, 6.10, multiple ICG/UMS servers… We want to Migrate devices from the old to the new, and we want to investigate any possible methods that don’t require either a Factory Reset on the device or the migration of the current DB…
I have been testing various “icg-config” type commands for weeks and I cannot get them to produce consistent, good results
icg-config isn’t a supported method, and doesn’t exist in all versions of IGEL OS
Honestly, did you do a backup and restore and keep all the same certificates?
An option is to have IGEL advanced services tie all of this out for you.
Advanced Services
Yeah I realize it’s not supported… We’ve had working sessions with IGEL Consulting and they have told us the same thing, even AS they gave us a few commands to put into a Profile to TRY…
Did you see Chris’ question?
> did you do a backup and restore and keep all the same certificates
Is the new UMS instance a restore of some of the old backups/files/certificates?
No, I don’t think Backup/Restore is a part of this effort…. The New UMS env is completely brand-new
Are you able double check?
It should be in “UMS Administration” –> “Global Configuration” –> “Certificate Management” –> “Device Communication”:
1. Do you see “tckey”? Only one?
2. When you select “tckey”, how many device are showing as using the selected certificate?
Assuming you mean the CURRENT environment, Yes, all 3400-ish of our Devices show as using the Cert when I click on “TCKEY”…
The new environment please? 😉
Well it’s brand-new so it has exactly Zero 🙂 Maybe I’m not understanding your point
Oh, just looking to have you go into to the new UMS, and double-check that it says zero…with your own eyes.
And when you are in there, check that the old UMS tckey, and the new UMS tckey, are actually different? A difference in the fingerprints should confirm this.
OK will do
Continue reading and comment on the thread ‘Is IGEL OS “Read Only”? ‘. Not a member? Join Here!
Learn more, search the IGEL Knowledge Base
Ask a question or comment on the above message thread?
Join or log in to the IGEL Community to ask us anything and meet other IGEL customers, partners, and EUC enthusiasts.Submit a question, or Join Today!