On-Prem Agent

Overview

The on-prem agent runs inside your network and executes migrations locally. Data flows directly between your source and destination platforms without passing through MigrateData's cloud infrastructure. Only metadata (item counts, status, timestamps) reaches the cloud dashboard.

The on-prem agent option is designed for regulated industries — healthcare, finance, and government — as well as any organization that needs data to stay inside its own network perimeter.

Agent Registration

Once your agent is deployed and running, register it with the MigrateData cloud dashboard:

1. Go to Settings → Agents in the MigrateData dashboard
2. Click Register New Agent
3. Copy the generated agent token
4. Use the token in your agent deployment configuration
5. The agent will appear as "Online" in the dashboard once connected

Security Features

• HMAC-SHA256 message signing — all messages between agent and cloud are cryptographically signed
• AES-256-GCM encryption — all local data (credentials, config) encrypted at rest
• Credential scoping — agent only receives credentials needed for the current job
• Credential wiping — credentials are wiped from agent memory after job completion
• Replay protection — short signed message window prevents replay attacks

Monitoring

The agent exposes a metrics endpoint and a health endpoint suitable for standard enterprise monitoring integrations. The MigrateData dashboard also shows agent status, current jobs, and system metrics. Automatic alerts fire when an agent goes offline or its host runs low on disk.

Auto-Update

The agent checks for updates on a scheduled cadence and applies them during your configured maintenance windows. Only patches and minor updates are applied automatically — major upgrades require operator approval.