Migrating KVM from Edge (apigeetool) to X (apigeecli)

[pdouglas]

Hi,

We are in the process of migrating to Apigee X. Are we able to get the unencrypted values out of an encrypted KVM in Edge in order to migrate them into Apigee X? I only see the encrypted values returned, eg.,

apigeetool getKVMentry -t %token% -o ORG -e ENV --mapName myMap --entryName myMapEntry returns:

{"name":"myMapEntry","value":"*****"}

Thank you!

[dknezic]

The approach may be you need to securely deploy an API proxy with the KVM policy to do the decryption for you and have your own scripting/tooling to get output from it.

[Suresh_Ambati]

Hi,

You mentioned that we need to deploy an API proxy to do the decryption for us. Where I need to deploy the proxy in Apigee edge or Apigee x? And which command needs to be used in KVM policy? Could you please elaborate it a bit? 

[pdouglas]

Yes, apigeecli (for Apigee X), apigeetool (for Edge) and sackmesser will be vital tools for migration. We've completed a POC including migrating proxies, kvms, products and apps/ app credentials.