Contents

---

About This Guide

Who Should Read This Guide

What You Should Know

What's in This Guide

Conventions Used in This Guide

Documentation

Command-Line Tools

CS Migration Utility

History

Overview

Caveats regarding Migration

Step 1: Before Migration

Step 2: Creation of a New CS Installation

Step 3: Stopping all new CS instances

Step 4: Migration of Security Databases

CMS 4.1

CMS 4.1 [CA]

CMS 4.2

CMS 4.2 [CA]

CMS 4.2 [DRM]

CMS 4.2 (SP 2), CMS 4.5, or iCMS 4.7

CMS 4.2 (SP 2), CMS 4.5, or iCMS 4.7 [CA]

CMS 4.2 (SP 2), CMS 4.5, or iCMS 4.7 [DRM]

CMS 4.2 (SP 2), CMS 4.5, or iCMS 4.7 [OCSP]

CMS 6.0

CMS 6.0 [CA]

CMS 6.0 [DRM]

CMS 6.0 [OCSP]

CMS 6.1, or CMS 6.2

CMS 6.1, or CMS 6.2 [CA]

CMS 6.1, or CMS 6.2 [DRM]

CMS 6.1, or CMS 6.2 [OCSP]

CMS 7.0, or CS 7.1

CMS 7.0, or CS 7.1 [CA]

CMS 7.0, or CS 7.1 [DRM]

CMS 7.0, or CS 7.1 [OCSP]

CMS 7.0, or CS 7.1 [TKS]

Step 5: Migration of Password Cache Data and Password.conf

CMS 4.1 Password Cache Data

CMS 4.2, CMS 4.2 (SP 2), CMS 4.5, or iCMS 4.7 Password Cache Data

CMS 6.0, CMS 6.1, CMS 6.2, CMS 7.0, or CS 7.1 Password Cache Data and Password.conf

Step 6: Migration of Internal DB Data

CMS 4.1 Internal DB Data

CMS 4.2 Internal DB Data

CMS 4.2 (SP 2) Internal DB Data

CMS 4.5 Internal DB Data

iCMS 4.7 Internal DB Data

CMS 6.0 Internal DB Data

CMS 6.01 Internal DB Data

CMS 6.1 Internal DB Data

CMS 6.2 Internal DB Data

CMS 7.0 Internal DB Data

CS 7.1 Internal DB Data

Step 7: Customization of User Data (non-Console)

Step 8: Starting all new CS instances

Step 9: Generation of New CS Server Certificates

Renew a [CA] SSL Server Certificate by Signing it with your CA Signing Certificate

Renew a [CA] SSL Server Certificate by Issuing an SSL Server Certificate Request

Renew a [DRM], [OCSP], or [TKS] SSL Server Certificate

Step 10: Customization of User Data (Console)

Step 11: After Migration

Detailed Example of a CS Migration

[CA] Migration

Step 1: Before Migration

Step 2: Creation of a New CS Installation

Step 3: Stopping all new CS instances

Step 4: Migration of Security Databases

Step 5: Migration of Password Cache Data

Step 6: Migration of Internal DB Data

Step 7: Customization of User Data (non-Console)

Step 8: Starting all new CS instances

Step 9: Generation of New CS Server Certificates

Step 10: Customization of User Data (Console)

Step 11: After Migration

[DRM] Migration

Step 1: Before Migration

Step 2: Creation of a New CS Installation

Step 3: Stopping all new CS instances

Step 4: Migration of Security Databases

Step 5: Migration of Password Cache Data

Step 6: Migration of Internal DB Data

Step 7: Customization of User Data (non-Console)

Step 8: Starting all new CS instances

Step 9: Generation of New CS Server Certificates

Step 10: Customization of User Data (Console)

Step 11: After Migration

[OCSP] Migration

Step 1: Before Migration

Step 2: Creation of a New CS Installation

Step 3: Stopping all new CS instances

Step 4: Migration of Security Databases

Step 5: Migration of Password Cache Data

Step 7: Customization of User Data (non-Console)

Step 8: Starting all new CS instances

Step 9: Generation of New CS Server Certificates

Step 10: Customization of User Data (Console)

Step 11: After Migration

Password Cache Utility

Location

Syntax

Usage

Listing the Contents of the Password Cache

Generating a new Protection Key for the Password Cache

Adding a New Entry to the Password Cache

Changing the Password of an Entry in the Password Cache

Deleting an Entry From the Password Cache

AuditVerify

About the AuditVerify Tool

Setting Up the Auditor's Database

Audit Verify Tool Syntax

Return Values

Using the Audit Verify Tool

PIN Generator Tool

Locating the PIN Generator Tool

The setpin Command

Command-Line Syntax

Example

How the Tool Works

Input File

Output File

How PINs Are Stored in the Directory

Exit Codes

Extension Joiner Tool

Location

Syntax

Usage

Backing Up and Restoring Data

Backup and Restore Tools

Backing Up Data

What the Backup Tool Does

What the Backup Tool Does Not Do

Running the Backup Tool

After You Finish a Backup

Signing Backup Data Using CSutil

Verifying Signed Backup Data using CSutil

Restoring Data

Before You Restore Data

Running the Restore Tool

ASCII to Binary Tool

Location

Syntax

Example

Binary to ASCII Tool

Location

Syntax

Example

Pretty Print Certificate Tool

Location

Syntax

Examples

Pretty Print CRL Tool

Location

Syntax

Example

TKS Tool

Location

Setting the Library Path Environment Variable

Syntax

Options

Sample

Index