And 7.1 Online Certificate Status Protocol Manager (Ocsp) Migration; Case I: Security Databases To Security Databases Migration - Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE Manual

NOTE
The caSigningCert is not referenced in the CS.cfg file.
20. In the same directory, edit the serverCertNick.conf file to contain the old certificate nickname. For example:
vi serverCertNick.conf
new_HSM_slot_name:Server-Cert cert-old_DRM_instance
6.3. 7.0 and 7.1 Online Certificate Status Protocol Manager
(OCSP) Migration
Determine if the migration to be performed involves software security databases, an HSM, or both. There are four possible
migration scenarios; follow the appropriate process for the deployment scenario being migrated.
• Section 6.3.1, "Case I: Security Databases to Security Databases Migration"
• Section 6.3.2, "Case II: Security Databases to HSM Migration"
• Section 6.3.3, "Case III: HSM to Security Databases Migration"
• Section 6.3.4, "Case IV: HSM to HSM Migration"

6.3.1. Case I: Security Databases to Security Databases Migration

1. Remove all the security databases in the new Certificate System which will receive migrated data.
rm /var/lib/instance_ID/alias/cert8.db
rm /var/lib/instance_ID/alias/key3.db
2. Copy the certificate and key security databases from the old server to the new server.
cp old_server_root/alias/cert-old_OCSP_instance-cert8.db
/var/lib/instance_ID/alias/cert8.db
cp old_server_root/alias/cert-old_OCSP_instance-key3.db
/var/lib/instance_ID/alias/key3.db
3. Log into the new server as the Certificate System user, and open the Certificate System alias/ directory.
cd /var/lib/instance_ID/alias/
4. Log in as root, and set the file user and group to the Certificate System user and group.
su
chown user:group cert8.db
chown user:group key3.db
5. Log out as root. As the Certificate System user, change the permissions on the files.
chmod 00600 cert8.db
chmod 00600 key3.db
6.3. 7.0 and 7.1 Online Certificate
Status Protocol Manager (OCSP)
130 Chapter 7. Step 4: Migrating Security