The steps mentioned in this article can be used to reenroll the server agent for the following reasons:
- Moving from Advanced Server Access (ASA) to Okta Privileged Access (OPA)
- Moving from the ASA team/project to a new ASA team/project
- Moving from the OPA team to a new OPA team
- Advanced Server Access (ASA)
- Okta Privileged Access (OPA)
- scaleft-server-tools
The information that ties the server agent to the team needs to be removed.
Ideally, the server should be deleted from the UI, as this will remove the users from the server, and then add the new enrollment.token.
The users will stay on the server after removal. If possible, the groups can be removed from the project, or the (sft_managed) users and groups can be removed manually from the server.
From the server, make sure the following is done based on the Operating System (OS):
Windows
- The folder will need to be removed.
C:\Windows\System32\config\systemprofile\AppData\Local\ScaleFT - Restart the service, which will recreate the folder.
- Open services and find Scaleft Server Tools, restart this, and validate that the folder was recreated.
- Now, the
enrollment.tokencan be added. - The server will now be re-enrolled.
Linux
- The folder will need to be removed.
sudo rm -rf /var/lib/sftd - Restart the service, and it will recreate the folder.
sudo systemctl restart sftd - Now, the
enrollment.tokencan be added. - The server will now be re-enrolled.
