Red Hat Certificate System Migration Guide 7.2

Red Hat Certificate System Migration Guide 7.2

Copyright © 2006 Red Hat, Inc.

Table of Contents

1. Introduction to the Certificate System Migration Utility
1.1. History of Certificate System Releases
2. Migration Overview
3. Considerations before Migration
4. Step 1: Preparing the Older Server Instance for Migration
5. Step 2: Installing the New Certificate System
6. Step 3: Stopping the New Certificate System Servers
7. Step 4: Migrating Security Databases
7.1. Certificate Management System 4.1 Certificate Authority (CA) Migration
7.1.1. Case I: Security Databases to Security Databases Migration
7.1.2. Case II: Security Databases to HSM Migration
7.1.3. Case III: HSM to Security Databases Migration
7.1.4. Case IV: HSM to HSM Migration
7.2. Certificate Management System 4.2
7.2.1. 4.2 Certificate Authority (CA) Migration
7.2.2. 4.2 Data Recovery Manager (DRM) Migration
7.3. Netscape Certificate Management System 4.2 (SP 2) and 4.5 and iPlanet Certificate Management System 4.7
7.3.1. 4.2SP2, 4.5, and 4.7 Certificate Authority (CA) Migration
7.3.2. 4.2SP2, 4.5, and 4.7 Data Recovery Manager (DRM) Migration
7.3.3. 4.2SP2, 4.5, and 4.7 Online Certificate Status Protocol (OCSP) Migration
7.4. Certificate Management System 6.0
7.4.1. 6.0 Certificate Authority (CA) Migration
7.4.2. 6.0 Data Recovery Manager (DRM) Migration
7.4.3. 6.0 Online Certificate Status Protocol Responder (OCSP) Migration
7.5. Certificate Management System 6.1 and 6.2
7.5.1. 6.1 and 6.2 Certificate Authority (CA) Migration
7.5.2. 6.1 and 6.2 Data Recovery Manager (DRM) Migration
7.5.3. 6.1 and 6.2 Online Certificate Status Protocol Manager (OCSP) Migration
7.6. Certificate Management System 7.0 and Certificate System 7.1
7.6.1. 7.0 and 7.1 Certificate Authority (CA) Migration
7.6.2. 7.0 and 7.1 Data Recover Manager (DRM) Migration
7.6.3. 7.0 and 7.1 Online Certificate Status Protocol Manager (OCSP) Migration
7.6.4. 7.0 and 7.1 Token Key Service (TKS) Migration
8. Step 5: Migrating Password Cache Data
8.1. Migrating 4.1 Password Cache Data
8.2. Migrating 4.2, 4.2 (SP 2), 4.5, and 4.7 Password Cache Data
8.3. Migrating 6.0, 6.1, 6.2, 7.0, and 7.1 Password Cache Data
9. Step 6: Migrating Internal Databases
9.1. Migrating Internal Databases for 4.1
9.2. Migrating Internal Databases for 4.2
9.3. Migrating Internal Databases for 4.2 (SP 2)
9.4. Migrating Internal Databases for 4.5
9.5. Migrating Internal Databases for 4.7
9.6. Migrating Internal Databases for 6.0
9.7. Migrating Internal Databases for 6.01
9.8. Migrating Internal Databases for 6.1
9.9. Migrating Internal Databases for 6.2
9.10. Migrating Internal Databases for 7.0
9.11. Migrating Internal Databases for 7.1
10. Step 7: Customizing User Data (Non-Console)
11. Step 8: Starting All New Certificate System Instances
12. Step 9: Renewing Certificate System Server Certificates
12.1. Renewing a CA SSL Server Certificate by Signing It with the CA Signing Certificate
12.2. Renewing a CA SSL Server Certificate by Issuing an SSL Server Certificate Request
12.3. Renewing a DRM, OCSP, or TKS SSL Server Certificate
13. Step 10: Customizing User Data (Console)
14. Step 11: Verifying Migration
15. Detailed Example of a Certificate System Migration
15.1. CA Migration
15.1.1. Step 1: Preparing the Old Certificate System
15.1.2. Step 2: Creating a New Certificate System Installation
15.1.3. Step 3: Stopping All New Certificate System Instances
15.1.4. Step 4: Migrating Security Databases
15.1.5. Step 5: Migrating Password Cache Data
15.1.6. Step 6: Migrating Internal Databases
15.1.7. Step 7: Customizing User Data (Non-Console)
15.1.8. Step 8: Starting All New Certificate System Instances
15.1.9. Step 9: Generating New Certificate System Server Certificates
15.1.10. Step 10: Customizing User Data (Console)
15.1.11. Step 11: After Migration
15.2. DRM Migration
15.2.1. Step 1: Preparing the Old Server
15.2.2. Step 2: Creating a New Certificate System Installation
15.2.3. Step 3: Stopping All New Certificate System Instances
15.2.4. Step 4: Migrating Security Databases
15.2.5. Step 5: Migrating Password Cache Data
15.2.6. Step 6: Migrating Internal Databases
15.2.7. Step 7: Customizing User Data (Non-Console)
15.2.8. Step 8: Starting All New Certificate System Instances
15.2.9. Step 9: Renewing the Certificate System Server Certificates
15.2.10. Step 10: Customizing User Data (Console)
15.2.11. Step 11: Verifying Migration
15.3. OCSP Migration
15.3.1. Step 1: Preparing the Old Server
15.3.2. Step 2: Creating a New Certificate System Installation
15.3.3. Step 3: Stopping All New Certificate System Instances
15.3.4. Step 4: Migrating Security Databases
15.3.5. Step 5: Migrating Password Cache Data
15.3.6. Step 6: Migration of Internal Databases
15.3.7. Step 7: Customizing User Data (Non-Console)
15.3.8. Step 8: Starting All New Certificate System Instances
15.3.9. Step 9: Renewing the Certificate System Server Certificates
15.3.10. Step 10: Customizing User Data (Console)
15.3.11. Step 11: Verifying Migration