Red Hat CERTIFICATE SYSTEM 7.0 - MIGRATION GUIDE Manual page 54

Chapter 5. Step 4: Migrating Security Databases
2. Log into the 7.x server as the Certificate System user for that machine.
3. Migrate the master key from the 7.x TKS instance. (Depending on your installation, there may
not be any master key information stored in the 7.x TKS instance.)
a. Open the 7.x configuration file.
• If the migration is from Certificate Management System 7.0, open the
directory.
config
• If the migration is from Certificate System 7.1, open the
System
config
• If the migration is from Certificate System 7.2, open the
System
/var/lib/
b. Write down the exact value for the
tks.mk_mappings.#tks_master_key_version_number#01=internal:tks_master_key_version_name
A
tks.mk_mappings
tks.mk_mappings.#02#01=internal:tks_master_key_v2
In this example,
02
the tks_master_key_version_name.
4. Copy the certificate and key security databases from the 7.x server to the 7.3 server.
cp old_server_root/alias/cert-old_TKS_instance-cert8.db
/var/lib/instance_ID/alias/cert8.db
cp old_server_root/alias/cert-old_TKS_instance-key3.db
/var/lib/instance_ID/alias/key3.db
5. Open the Certificate System
cd /var/lib/instance_ID/alias/
6. Log in as .
root
7. Set the file user and group to the Certificate System user and group.
# chown user:group cert8.db
48
directory.
instance_ID directory.
/conf
tks.mk_mappings.
value looks like the following:
is the tks_master_key_version_ number, and
directory.
alias/
CMS.cfg
file in the Certificate
CS.cfg
file in the Certificate
CS.cfg
line.
tks_master_key_v2
in the
is