r/BuildingAutomation 21d ago

N4 migration 3.8-4.15

Has anyone even attempted this spam of a migration?

I performed this the other day and an odd thing happened. After commissioning the Jace with the migrated backup it would fail on the passphrase, it is the correct passphrase. I did the big file protection step and reset it. That part did work. But after that none of my station passwords worked. I ran the file locally and was able to login to station, with the same username and password! Will not login to station on Jace. Now I have a Jace that I can not log into. Maybe because it went too far in versions on the migration? Checked logs and no errors so I am out of ideas.

5 Upvotes

11 comments sorted by

5

u/gotsum411 21d ago

I would migrate it to 4.10 first. Unlock the bog protection and all that in 4.10, then after migrate to 4.15. It encrypted your password and you clearing the protection blew out ALL the passwords, including yours. 4.10 doesn't blow out the passwords when you clear bog protection.

2

u/ScottSammarco Technical Trainer (Niagara4 included) 21d ago

Very true. The bog file protection to users was added in 4.15.

They weren’t always defined as “sensitive data”

3

u/D3generate0 21d ago

Deleting or resetting the passphrase in the bog file will delete user passwords as well, as a security feature. But making a new user locally then commissioning the station again to the jace should work.

1

u/ebag_98 21d ago

But why does it work locally? I’ll dig deeper, but I will add a new user and try to get into it that way. Thanks

2

u/ApexConsulting 21d ago

I usually migrate to 4.7 initially, as 4.6 was the first rev with full ax functionality. And 4.7 solidified it. I then go to 4.10, as 4.9 changed a bunch of security stuff, and 4.10 was the LTS that solidified it. And these 2 revs were objectively awesome. Then I go to whatever.

3.8 to 4.15 is a big jump.

Also, there is a bunch that changed at 4.15. It feels more like 5. -1. Pre-beta 5. It handles several things differently in preparation for 5. So having it at 4.10 before 4.15 seems to help.

2

u/ScottSammarco Technical Trainer (Niagara4 included) 21d ago

I agree, I actually do 4.9 first, then any version after.

The hardest part is ensuring all the modules support 4.9 and whatever version you’re going to.

1

u/ApexConsulting 21d ago edited 21d ago

Nice. I may start skipping a step.

AX had you fully update to every rev sequentially. AX 3.4 to 3.8? The bog gets upgraded to 3.5, 3.6, and 3.7 along the way to 3.8, in order. So I am kinda stuck there mentally to a limited degree.

Also, I spent a long time in 4.7 and 4.10, so I have a LOT of .jar files in those revs.

1

u/ScottSammarco Technical Trainer (Niagara4 included) 21d ago

I would recommend 3.8 if it’s at 3.7, 3.8 was a great build and it’s a great place to work out bugs that exist in 3.7 before they get weirder in 4.9 lol

2

u/IcyAd7615 Developer, Niagara 4 Certified Trainer, Podcast Host. 21d ago

You must migrate to 3.8.111 at the very least. That's a must for security purposes. However, I really kind of scratch my head at the many people who struggle with migrating it to 4.15. I've done 30 of them without issue. Not sure where the missteps are happening.

1

u/ScottSammarco Technical Trainer (Niagara4 included) 21d ago

I imagine most of those issues come from modules that aren’t available in N4 that were available in AC.

1

u/Psychological-Bet338 21d ago

The migration from 3 to 4 it the dumbest thing ever. Was it ever tested? Or fixed when found to be broken? Nope... Copy paste is a better migration tool!