Migrate to federal ePO

Federal ePO - SaaS is a multi-tenant, enterprise SaaS model of ePO - On-prem hosted in federal cloud, accessible through an internet browser. You can migrate systems from the ePO - On-prem server to federal cloud using the ePO - SaaS Migration extension.

Before you begin, make sure that these conditions are met.

You have an active federal ePO - SaaS account.
Your ePO - On-prem version is 5.3.3 or later.
You have installed the ePO - SaaS Migration extension 5.10.0.874 or later on your current ePO - On-prem server.
The ePO - On-prem server has internet connectivity. If you're using a proxy server, make sure that you have configured the proxy server settings.
The client systems can communicate with the ePO - SaaS server.
The agent repository policies have proxy settings to connect to the federal ePO - SaaS server.
You have configured the proxy and firewall settings to allow communication with the federal ePO - SaaS server. For more information, see KB90878.
The federal ePO - SaaS tenant account that you're planning to link has an active subscription and administrator rights.
You have identified inactive systems and excluded them from the migration process. Migration can't be complete if even one of the systems is not reachable.
You have installed Trellix Agent 5.6.0.702.1 or later on the client systems.
Note
The most current supported version of Trellix Agent is 5.6.4.249. If you are migrating systems that have Trellix Agent versions higher than 5.6.4.249, the systems appear as noncompliant in Protection Workspace.
You have excluded systems that have products other than Trellix Agent and Trellix ENS installed from the migration process. Federal ePO - SaaS currently supports Trellix Agent and Trellix ENS only.

Connect to the ePO - On-prem server database.

Run these SQL commands.

Select * FROM OrionServerPropertiesMT WHERE [Key] IN ( 'iam.url' , 'iam.client.id' , 'MVision.url',  'tps.url','uam.url');
                
IF EXISTS (SELECT * FROM OrionServerPropertiesMT where [Key]='iam.url')
   UPDATE [OrionServerPropertiesMT] SET [Value] = 'https://iam.us.trellix-gov.com/iam/v1.0/token' where [Key]='iam.url'
                
IF EXISTS (SELECT * FROM OrionServerPropertiesMT where [Key]='iam.client.id')
			UPDATE [OrionServerPropertiesMT] SET [Value] = 'efb532b4d8e914c2619d' where [Key]='iam.client.id'
                                
IF EXISTS (SELECT * FROM OrionServerPropertiesMT where [Key]='tps.url')
   UPDATE [OrionServerPropertiesMT] SET [Value] = 'https://tps.epo.us.trellix-gov.com/govprod' where [Key]='tps.url'
                                
IF EXISTS (SELECT * FROM OrionServerPropertiesMT where [Key]='uam.url')
   UPDATE [OrionServerPropertiesMT] SET [Value] = 'https://api.uam.us.trellix-gov.com/govprod/api/v1' where [Key]='uam.url'
                
IF NOT EXISTS (SELECT * FROM OrionServerPropertiesMT where [Key]='MVision.url')
   INSERT INTO [OrionServerPropertiesMT] ([Key], [Value], [TenantId]) VALUES ('MVision.url', 'https://ui.gov001.epo.us.trellix-gov.com/', 1)
   ELSE
   UPDATE [OrionServerPropertiesMT] SET [Value] = 'https://ui.gov001.epo.trellix-gov.com/' where [Key]='MVision.url'

Select * FROM OrionServerPropertiesMT WHERE [Key] IN ( 'iam.url' , 'iam.client.id' , 'MVision.url',  'tps.url','uam.url');

Reload the ePO - SaaS Migration extension by running the remote command — https://<epo server IP or fqdn>:8443/remote/core.reload-plugin?name=MVISIONClientMigration.
Log off and log on again to ePO - On-prem.
Migrate your systems from ePO - On-prem — Migrate to ePO - SaaS.
Tip
Plan to migrate your systems in multiple phases — A trial phase to migrate few systems, then one or more phases to migrate the remaining systems.

Migrate to federal ePO - SaaS