Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE Manual page 164

The internal database name for the Certificate System instance is in the internaldb.database parameter in the
CS.cfg file. For example:
cd /opt/redhat-ds/slapd-DS-instance/db
db2ldif -n server.example.com-rhpki-ca
The location and name of the LDIF file is shown once the conversion from the database to LDIF is complete.
ldif file: /opt/redhat-ds/slapd-DS-instance/ldif/dated_#_file.ldif
2. Open the LDIF file directory, and rename the LDIF file new.ldif.
cd /opt/redhat-ds/slapd-DS-instance/ldif
mv dated_#_file.ldif new.ldif
3. The migration utility is available as an independent RPM, which can be downloaded through the Certificate System
Red Hat Network channel. The migration utilities are installed in the directory /usr/share/rhpki/migrate.
a. Open the migration directory.
cd /usr/share/rhpki/migrate
b. Package the latest version of the migration utility using zip or tar.
tar -cvf migrate.tar migrate
NOTE
Regardless of the packaging tool used, the corresponding tool must be present on the old server machine. If the
platforms are identical and the zip utility is used, copy the unzip utility to the old_server_root/
bin/cert/ directory so that the zip and unzip versions match.
c. Copy the package from the new server to the old server.
cp /usr/share/rhpki/migrate.zip old_server_root/bin/cert
cp /usr/share/rhpki/migrate.tar old_server_root/bin/cert
rm /usr/share/rhpki/migrate.tar
d. Log into the old server as the Certificate System user for that machine, and open the Certificate System bin/
cert/ directory.
cd old_server_root/bin/cert
e. Log in as root, and set the file user and group to the Certificate System user and group.
su
chown user:group migrate.tar
f. Log out as root. As the Certificate System user, change the permissions on the files.
chmod 00600 migrate.tar
2. Migrating Internal Databases for
4.2
Databases