Certificate Management System 6.1 And 6.2; And 6.2 Certificate Authority (Ca) Migration; Case I: Security Databases To Security Databases Migration - Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE Manual

vi CS.cfg
15. Edit the ocsp.signing.certnickname attribute to reflect the new OCSP instance.
ocsp.signing.certnickname=new_HSM_slot_name:ocspSigningCert cert-old_OCSP_instance
NOTE
The caSigningCert is not referenced in the CS.cfg file.
16. In the same directory, edit the serverCertNick.conf file to contain the old certificate nickname. For example:
vi serverCertNick.conf
new_HSM_slot_name:Server-Cert cert-old_OCSP_instance

5. Certificate Management System 6.1 and 6.2

There are three subsystems which can be migrated from Certificate Management System 6.1 and 6.2 to a later version of
Certificate System: the Certificate Authority (CA), the Data Recovery Manager (DRM), and the Online Certificate Status
Protocol Manager (OCSP). Each subsystem has different migration procedures.
• Section 5.1, "6.1 and 6.2 Certificate Authority (CA) Migration"
• Section 5.2, "6.1 and 6.2 Data Recovery Manager (DRM) Migration"
• Section 5.3, "6.1 and 6.2 Online Certificate Status Protocol Manager (OCSP) Migration"

5.1. 6.1 and 6.2 Certificate Authority (CA) Migration

Determine if the migration to be performed involves software security databases, an HSM, or both. There are four possible
migration scenarios; follow the appropriate process for the deployment scenario being migrated.
• Section 5.1.1, "Case I: Security Databases to Security Databases Migration"
• Section 5.1.2, "Case II: Security Databases to HSM Migration"
• Section 5.1.3, "Case III: HSM to Security Databases Migration"
• Section 5.1.4, "Case IV: HSM to HSM Migration"

5.1.1. Case I: Security Databases to Security Databases Migration

1. Remove all the security databases in the new Certificate System which will receive migrated data.
rm /var/lib/instance_ID/alias/cert8.db
rm /var/lib/instance_ID/alias/key3.db
2. Copy the certificate and key security databases from the old server to the new server.
cp old_server_root/alias/cert-old_CA_instance-cert8.db
/var/lib/instance_ID/alias/cert8.db
cp old_server_root/alias/cert-old_CA_instance-key3.db
/var/lib/instance_ID/alias/key3.db
86 Chapter 7. Step 4: Migrating Security