Red Hat CERTIFICATE SYSTEM 6.0 - MIGRATION GUIDE Manual page 31

4. Log in as .
root
5. Set the file user and group to the Certificate System user and group.
# chown user:group cert8.db
# chown user:group key3.db
6. Log out as , and log back into the system as the Certificate System user.
root
7. Set the file permissions.
chmod 00600 cert8.db
chmod 00600 key3.db
8. List the certificates in the old security databases by using the
certificates.
certutil -L -d .
Server-Cert cert-old_DRM_instance cu,cu,cu
caSigningCert cert-old_DRM_instance CT,c,
kraStorageCert cert-old_DRM_instance u,u,u
kraTransportCert cert-old_DRM_instance u,u,u
NOTE
For Certificate Management System version 6.0x, the certificate database is
automatically converted from
9. Open the configuration file in the
CS.cfg
10. E dit the
kra.storageUnit.nickname
the 7.3 DRM instance.
kra.storageUnit.nickname=kraStorageCert cert-old_DRM_instance
kra.transportUnit.nickname=kraTransportCert cert-old_DRM_instance
NOTE
The
caSigningCert
Option 1: Security Databases to Security
to
cert7.db cert8.db
instance_ID
/var/lib/
and
kra.transportUnit.nickname
is not referenced in the
tool;
certutil -L
.
directory.
/conf/
attribute to reflect
file.
CS.cfg
lists the
25