IQService migration

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Hi all,

We are planning to move IQService from one server to another. Is there like a checklist/things that we should keep in mind.

The new server is running Windows Server 2022.

Thanks in advance

2

Nothing much, Just take the backup of your existing iq service directory and logs. Take a backup of all the powershell script running on the iq server, for mailbox enablement and other purpose. Note down the current IQService configuration (port, service account, endpoint settings).

Please make sure on your new server, TLS certs are installed. the connectivity should be open from iiq to your new server and from there to your host.

3

hi @rishavghoshacc

Yes, there are a few key things to check when moving IQService to a new server (Windows Server 2022 is fine and supported).

Checklist / Things to keep in mind:

  1. Version alignment

    • Install the same IQService version as your IdentityIQ version (and patch level).

  2. Service account

    • Use the same service account (or ensure the new one has identical permissions).

    • Verify Log on as a service rights.

    • If using Kerberos / SPNs (e.g., for AD), recheck SPN registrations.

  3. Certificates

    • Export/import any certificates used for SSL/TLS between IIQ and IQService.

    • Update iisqservice.properties (or equivalent) if cert paths/aliases change.

  4. Configuration files

    • Copy and review:

      • IQService.properties

      • log4net.config

      • any custom scripts or connector binaries

    • Update hostnames, IPs, file paths if they differ.

  5. Firewall & network

    • Ensure required ports are open both ways (default IQService port, LDAP, etc.).

    • Update the IQService host reference in IdentityIQ (Application → IQService settings).

  6. Dependencies

    • Install required .NET Framework / VC++ Redistributables as per SailPoint docs.

    • Confirm PowerShell version and execution policy (if used by connectors).

  7. Testing

    • Restart the IQService and verify logs come up clean.

    • Test:

      • AD aggregation

      • Create/Modify/Disable account

      • Password change/reset

  8. Decommission old server

    • Only after successful validation, stop and remove IQService from the old host to avoid confusion.

Overall, the move is straightforward as long as config, certificates, and service account permissions are carried over correctly as above mentioned by @naveenkumar3

Also can refer to

Hope this helps.

4

@rishavghoshacc Incase you are using High Availability and have multiple IQService behind a load balancer, then you should check the LB and DNS settings to point to the new servers as well.

Rest all details are already covered by fellow Sailors above.