3.9.2. Updating a Solaris 9 system using pkgrm and pkgadd

3.9.2. Updating a Solaris 9 system using pkgrm and pkgadd

To install or upgrade Certificate System on Solaris, you need to ensure that all packages and binaries from the previous installation have been removed. The following procedure describes the required steps.

Procedure 3.1. To remove all existing Certificate System components:

  1. Stop all Certificate System instances. 

    /etc/init.d/instance_ID stop

  2. Log in as root.

  3. Use the following commands to remove the previous instances: 

    				
pkiremove -pki_instance_root=/var/lib -pki_instance_name=rhpki-ca
pkiremove -pki_instance_root=/var/lib -pki_instance_name=rhpki-ocsp
pkiremove -pki_instance_root=/var/lib -pki_instance_name=rhpki-tks
pkiremove -pki_instance_root=/var/lib -pki_instance_name=rhpki-tps

  4. Remove all subsystem binaries using rhpki-uninstall: 

    rhpki-uninstall -pki_subsystem=all

  5. Remove the actual install and uninstall scripts: 

    pkgrm RHATrhpki-managex
Procedure 3.2. To install the new CA:

  1. Install the install and uninstall scripts: 

    pkgadd -d RHATrhpki-managex-7.3.0-12.sol9.noarch.pkg

  2. Use the install script to install the CA: 

    rhpki-install -pki_subsystem=ca -pki_package_path=.

    Important

    Ensure that the current directory contains all the Solaris packages.

  3. For the remaining subsystems, use tks, ocsp, etc., as the pki_subsystem parameter.

  4. Restart the Certificate System instances. 

    /etc/init.d/instance_ID start

Note

The Solaris installation uses the same directory structure and configuration as the Red Hat Enterprise Linux installation.