Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.5.0 how to transfer config to another machine

    Scheduled Pinned Locked Moved General pfSense Questions
    8 Posts 2 Posters 861 Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F Offline
      f.meunier
      last edited by

      Hello all
      pfSense v2.5.0
      I want to migrate a pfsense config to a new (recent) machine. The new one has a different architecture (cpu, interfaces names)
      I exported (backup) the actual .xml config file, then modified :

      • the interfaces names,
      • reverted webgui protocol to http

      and imported it in the new machine with a fresh 2.5.0 install (in a testbed separated network)
      It boots, but the GUI is stuck on logon page. If admin password is incorrect, I clearly get a "Username or Password incorrect" message, but using the correct credentials, the logon screen clears the fields and does nothing. SSH is OK.

      I even get " /index.php: Successful login for user 'admin' " messages in the ssh console.

      I suspect a certs issue, but I don't know how to "reset" or switch to standard (webconfigurator) certs without using "reset to factory default".

      I tried " pfSsh.php playback generateguicert" but still no success.

      (mostly ZOTAC CI or CA nano barebones)

      JKnottJ 1 Reply Last reply Reply Quote 0
      • F Offline
        f.meunier
        last edited by f.meunier

        [edit]
        I switched to another browser (from firefox to edge) -> I managed to get in !
        I changed the password
        I changed the wan interface IP to connect to the outside ("Packages Reinstallation" occurred)
        I switch back to https
        reset WebGUI cert with "pfSsh.php playback generateguicert"
        -> now I can connect to GUI witch HTTPS

        Cert Authorities (CA) are correct. I have one internal CA and one "Acmecert Let's Encrypt"

        When I check the certs in "System / Certificate Manager / Certificates" there is an error in webConfigurator default
        seems that pfsense had a crash recovered : "[01-Mar-2021 15:56:02 Europe/Paris] PHP Fatal error: Uncaught Exception: DateTime::__construct(): Failed to parse time string (@) at position 0 (@): Unexpected character in /etc/inc/certs.inc:712"
        ... and I can't generate additionnal Certs : no button available
        Capture d’écran 2021-03-01 160439.png

        (mostly ZOTAC CI or CA nano barebones)

        1 Reply Last reply Reply Quote 0
        • JKnottJ Offline
          JKnott @f.meunier
          last edited by

          @f-meunier

          I copied the config from my old HP computer to my new Qotom a few weeks ago. It was very easy and only required a couple of minor tweeks. I copied the file directly from the old hard drive to a USB stick to the new drive. However, you can use the backup & restore functions too.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          F 1 Reply Last reply Reply Quote 0
          • F Offline
            f.meunier @JKnott
            last edited by

            @jknott
            Hello
            That is what I was expecting on my side, but it did not behave as planned.

            Did you transfer from v2.4.5 or 2.5.0 ?

            (mostly ZOTAC CI or CA nano barebones)

            JKnottJ 1 Reply Last reply Reply Quote 0
            • JKnottJ Offline
              JKnott @f.meunier
              last edited by JKnott

              @f-meunier

              2.4.5 > 2.4.5

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              F 1 Reply Last reply Reply Quote 0
              • F Offline
                f.meunier @JKnott
                last edited by

                @jknott
                I agree, it works for 2.4.5, but not for 2.5.0
                I can confirm transferring leads to a certificate corruption problem, and I'm wondering how I can "reset" or "clear" the certs, to start over cleanly.

                (mostly ZOTAC CI or CA nano barebones)

                JKnottJ 1 Reply Last reply Reply Quote 0
                • JKnottJ Offline
                  JKnott @f.meunier
                  last edited by

                  @f-meunier

                  Why not install to 2.4.5 and then update to 2.5.0?

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  F 1 Reply Last reply Reply Quote 0
                  • F Offline
                    f.meunier @JKnott
                    last edited by

                    @jknott
                    I already migrated the "source" machine to v2.5.0 and found a cert corruption issue + dns issue.

                    I had to redo the whole config on the new machine. However, it offered me the opportunity to "clean up" the whole config ;-)

                    I want to keep the old machine as a spare one eventually (even if not kept up to date) , so I'm looking for a 2.5.0 -> 2.5.0 transfer procedure.

                    (mostly ZOTAC CI or CA nano barebones)

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.