Getting started: Migration planning via the Vault Analysis Tool (VAT)

Getting started: Migration planning via the Vault Analysis Tool (VAT)

546
Created On 09/09/26 21:27 PM - Last Modified 09/11/26 18:44 PM


Environment


Preparing for a migration to the Idira® Identity Security Platform, by Palo Alto Networks is a critical step in modernizing your security infrastructure. To ensure a seamless and efficient transition from your existing environment, we have introduced the VAT (Vault Analysis Tool) workflow.

This tool simplifies the migration assessment process by automating the initial steps, allowing our Resource Team to analyze your environment more quickly and accurately.

What is the Vault Analysis Tool (VAT)?

The VAT is a specialized tool designed to help us understand your unique environment. By running it, you'll generate a secure, encrypted report (.VHC file) that allows our team to craft a tailored migration plan, proactively optimize your setup, and ensure your new environment is built for long-term success.

Why use the VAT workflow?

  • Faster Turnaround: By automating the submission process, your request goes directly to the appropriate team for review.

  • Accurate Planning: The insights gained from the VAT report allow our experts to tailor your migration plan to your environment’s configuration.

  • Secure Handling: All files remain encrypted throughout the transfer and ingestion process.

How to download Vault Analysis Tool (VAT)? 

The Vault Analysis Tool is available in the Idira Marketplace within the integrations and tools catalog. The Idira Marketplace is a new, native experience embedded directly within the Idira Identity Security Platform. To download VAT, login to your Idira Identity Security Platform tenant and navigate to SetUp Space > Ecosystem Hub > Marketplace. Search “Vault Analysis Tool” and download directly from there.

 

You can also view the VAT and any supporting resources in the public-facing Idira Marketplace here (available on the Palo Alto Networks Developer Portal). However, note this is view-only. If you wish to download the VAT, you will need to login to your tenant to do so.

 

How to Submit Your Request 

Follow these steps to submit your environment details and start your migration journey:

  1. Access the Portal: Log into the Palo Alto Networks Customer Support Portal (CSP). Navigate to Admin Case Creation > Request Type = Upgrades and Extensions > Request Type = Migration to Idira Security Platform.

  2. Download the Tool: On the submission page, you will find a link to download the Vault Analysis Tool.

  3. Run the Analysis: Execute the tool in your environment. This will generate an encrypted results file with a .VHC extension.

  4. Upload the File: Return to your Admin Case in the CSP and upload your encrypted .VHC file. The system will validate the file format to ensure it is ready for processing.

  5. Complete the Questionnaire: You will be asked to complete five mandatory questions regarding your environment (e.g., non-production deployments, non-business hour service requirements, script migration, HSM usage, and access to master keys).

  6. Submit: Once the file is uploaded and the questionnaire is complete, click Submit.

      What Happens Next?

      Once you submit your request:

      • A new Admin Case is automatically created in our system, and you will receive a confirmation.

      • Our backend systems will securely decrypt your .VHC file to extract the necessary information.

      • The Resource Team will review your report and questionnaire, then initiate your migration planning. You will be notified of the next steps via the case communication channel.

      Note: For security reasons, please ensure that you only upload the .VHC file generated by the VAT. Our team is dedicated to protecting your data throughout this migration process.

       



      Actions
      • Print
      • Copy Link

        https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000wm7fKAA&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail