Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE Manual page 189

1. Log into the Directory Server for the new Certificate System instance, and export the new internal database content to
LDIF. The internal database name for the Certificate System instance is in the internaldb.database parameter
in the CS.cfg file. For example:
cd /opt/redhat-ds/slapd-DS-instance/db
db2ldif -n server.example.com-rhpki-ca
The location and name of the LDIF file is shown once the conversion from the database to LDIF is complete.
ldif file:
/opt/redhat-ds/slapd-DS-instance/ldif/dated_#_file.ldif
2. Open the given LDIF location, and rename the LDIF file new.ldif.
cd /opt/redhat-ds/slapd-DS-instance/ldif
mv dated_#_file.ldif new.ldif
3. Copy the newest version of the migration utility from the new Certificate System to the old Certificate System.
The migration utility is available as an independent RPM, which can be downloaded through the Certificate System
Red Hat Network channel. The migration utilities are installed in the directory /usr/share/rhpki/migrate.
a. Open the migration directory.
cd /usr/share/rhpki
b. Package the latest version of the Certificate System migration utility using zip or tar.
tar -cvf migrate.tar migrate
NOTE
Regardless of the packaging tool used, the corresponding tool must be present on the old server machine. If the
platforms are identical and the zip utility is used, copy the zip tool from the new server to the old server so that
the zip and unzip versions match.
c. Copy the package from the new server to the old server, and then remove the package from the new Certificate
System.
cp /usr/share/rhpki/migrate.tar old_server_root/bin/cert
rm /usr/share/rhpki/migrate.tar
d. Log into the old server as the Certificate System user for that machine, and open the Certificate System bin/
cert/ directory.
cd old_server_root/bin/cert
e. Log in as root, and set the file user and group to the Certificate System user and group.
9. Migrating Internal Databases for
6.2
183 Chapter 9. Step 6: Migrating Internal