Policy & Deployment Cleanup

Document ID : KB000011651
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

This document shows how to remove older policy versions that are no longer needed.  You can do this with the dmsmgr utility.

Answer:

Here is a policy I created with 5 versions.

AC> list policy

(DMS__@localhost)

CATest#01

CATest#02

CATest#03

CATest#04

CATest#05

 

Syntax: dmsmgr -cleanup -policy <policy name> -vcount <number of versions to keep> {-dms|dh} <DMS/DH name>

 

Let’s only keep the last two versions of policy “CATest”:

C:\Users\Administrator>dmsmgr -cleanup -policy "CATest" -vcount 2 -dms DMS__

CA Access Control dmsmgr v12.61.1468 - dmsmgr utility

 

Copyright (c) 2010 CA. All rights reserved.

 

Successfully removed policy: CATest#01.

Successfully removed policy: CATest#02.

Successfully removed policy: CATest#03.

Operation completed successfully

 

Verified the removal:

AC> list policy

(DMS__@localhost)

CATest#04

CATest#05

 

The other topic we discussed was the removal of old deployment information.  This is something that should be done a few times a year to keep the DMS/DH clean and tidy.

 

The following example will remove all DEPLOYMENT objects from the database that are older than 30 days:

dmsmgr -cleanup -deployment -days 30 -dms DMS__@

dmsmgr -cleanup -deployment -days 30 -dh DH__@

 

The only downside I can think of, is if Deployment Audit contains information that is needed for auditing purposes.  But I haven’t found this information to be important to any customers so far. 

 

One thing I did notice is that the dmsmgr –cleanup –policy does not remove the RULESET objects – just the POLICY objects.

 

AC> list ruleset

(DMS__@localhost)

CATest#01

CATest#02

CATest#03

CATest#04

CATest#05

 

You can safely remove the RULESET objects, as follows (Amir gave me the OK for this a while ago).

 

AC> rr ruleset CATest#03 noexit

(DMS__@localhost)

Successfully deleted RULESET CATest#03

 

AC> rr ruleset CATest#02 noexit

(DMS__@localhost)

Successfully deleted RULESET CATest#02

 

AC> rr ruleset CATest#01 noexit

(DMS__@localhost)

Successfully deleted RULESET CATest#01