Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE Manual page 5

5.2. 6.1 and 6.2 Data Recovery Manager (DRM) Migration ........................................................94
5.2.1. Case I: Security Databases to Security Databases Migration .......................................94
5.2.2. Case II: Security Databases to HSM Migration ........................................................95
5.2.3. Case III: HSM to Security Databases Migration .......................................................98
5.2.4. Case IV: HSM to HSM Migration ....................................................................... 101
5.3. 6.1 and 6.2 Online Certificate Status Protocol Manager (OCSP) Migration ............................ 103
5.3.1. Case I: Security Databases to Security Databases Migration ..................................... 103
5.3.2. Case II: Security Databases to HSM Migration ...................................................... 105
5.3.3. Case III: HSM to Security Databases Migration ..................................................... 107
5.3.4. Case IV: HSM to HSM Migration ....................................................................... 109
6. Certificate Management System 7.0 and Certificate System 7.1 ..................................................... 112
6.1. 7.0 and 7.1 Certificate Authority (CA) Migration ............................................................. 112
6.1.1. Case I: Security Databases to Security Databases Migration ..................................... 112
6.1.2. Case II: Security Databases to HSM Migration ...................................................... 113
6.1.3. Case III: HSM to Security Databases Migration ..................................................... 116
6.1.4. Case IV: HSM to HSM Migration ....................................................................... 118
6.2. 7.0 and 7.1 Data Recover Manager (DRM) Migration ....................................................... 120
6.2.1. Case I: Security Databases to Security Databases Migration ..................................... 121
6.2.2. Case II: Security Databases to HSM Migration ...................................................... 122
6.2.3. Case III: HSM to Security Databases Migration ..................................................... 125
6.2.4. Case IV: HSM to HSM Migration ....................................................................... 127
6.3. 7.0 and 7.1 Online Certificate Status Protocol Manager (OCSP) Migration ............................ 130
6.3.1. Case I: Security Databases to Security Databases Migration ..................................... 130
6.3.2. Case II: Security Databases to HSM Migration ...................................................... 131
6.3.3. Case III: HSM to Security Databases Migration ..................................................... 134
6.3.4. Case IV: HSM to HSM Migration ....................................................................... 136
6.4. 7.0 and 7.1 Token Key Service (TKS) Migration .............................................................. 138
6.4.1. Case I: Security Databases to Security Databases Migration ..................................... 138
6.4.2. Case II: Security Databases to HSM Migration ...................................................... 140
6.4.3. Case III: HSM to Security Databases Migration ..................................................... 143
6.4.4. Case IV: HSM to HSM Migration ....................................................................... 146
8. Step 5: Migrating Password Cache Data ............................................................................................ 151
1. Migrating 4.1 Password Cache Data ......................................................................................... 151
2. Migrating 4.2, 4.2 (SP 2), 4.5, and 4.7 Password Cache Data ......................................................... 151
3. Migrating 6.0, 6.1, 6.2, 7.0, and 7.1 Password Cache Data ............................................................ 152
9. Step 6: Migrating Internal Databases ................................................................................................ 154
1. Migrating Internal Databases for 4.1 ......................................................................................... 154
2. Migrating Internal Databases for 4.2 ......................................................................................... 157
3. Migrating Internal Databases for 4.2 (SP 2) ............................................................................... 161
4. Migrating Internal Databases for 4.5 ......................................................................................... 164
5. Migrating Internal Databases for 4.7 ......................................................................................... 168
6. Migrating Internal Databases for 6.0 ......................................................................................... 171
7. Migrating Internal Databases for 6.01 ....................................................................................... 175
8. Migrating Internal Databases for 6.1 ......................................................................................... 179
9. Migrating Internal Databases for 6.2 ......................................................................................... 182
10. Migrating Internal Databases for 7.0 ....................................................................................... 186
11. Migrating Internal Databases for 7.1 ....................................................................................... 190
10. Step 7: Customizing User Data (Non-Console) ................................................................................. 195
11. Step 8: Starting All New Certificate System Instances ........................................................................ 196
12. Step 9: Renewing Certificate System Server Certificates ..................................................................... 197
1. Renewing a CA SSL Server Certificate by Signing It with the CA Signing Certificate ........................ 197
2. Renewing a CA SSL Server Certificate by Issuing an SSL Server Certificate Request ........................ 198
3. Renewing a DRM, OCSP, or TKS SSL Server Certificate ............................................................ 199
13. Step 10: Customizing User Data (Console) ....................................................................................... 201
14. Step 11: Verifying Migration ......................................................................................................... 202
15. Detailed Example of a Certificate System Migration .......................................................................... 203
1. CA Migration ....................................................................................................................... 204
1.1. Step 1: Preparing the Old Certificate System ................................................................... 204
1.2. Step 2: Creating a New Certificate System Installation ...................................................... 205
1.3. Step 3: Stopping All New Certificate System Instances ...................................................... 205
1.4. Step 4: Migrating Security Databases ............................................................................. 206
1.5. Step 5: Migrating Password Cache Data ......................................................................... 208
1.6. Step 6: Migrating Internal Databases .............................................................................. 209
1.7. Step 7: Customizing User Data (Non-Console) ................................................................. 213
1.8. Step 8: Starting All New Certificate System Instances ....................................................... 213
1.9. Step 9: Generating New Certificate System Server Certificates ........................................... 213
1.10. Step 10: Customizing User Data (Console) .................................................................... 214
1.11. Step 11: After Migration ............................................................................................ 214
Red Hat Certificate System Migration
Guide 7.2
v