Sign In
Upload
Manuals
Brands
Red Hat Manuals
Software
SYSTEM 8.0 - MIGRATION GUIDE 7.X TO 8.0
Red Hat SYSTEM 8.0 - MIGRATION GUIDE 7.X TO 8.0 Manuals
Manuals and User Guides for Red Hat SYSTEM 8.0 - MIGRATION GUIDE 7.X TO 8.0. We have
1
Red Hat SYSTEM 8.0 - MIGRATION GUIDE 7.X TO 8.0 manual available for free PDF download: Manual
Red Hat SYSTEM 8.0 - MIGRATION GUIDE 7.X TO 8.0 Manual (124 pages)
Migration Guide 7.x to 8.0
Brand:
Red Hat
| Category:
Software
| Size: 0 MB
Table of Contents
Table of Contents
3
About this Guide
7
Recommended Knowledge
7
Examples and Formatting
7
Formatting for Examples and Commands
7
Tool Locations
8
Guide Formatting
8
Additional Reading
8
Giving Feedback
9
Document History
10
Introduction to Red hat Certificate System Migration
11
Certificate System Migration Overview
11
Migration Scripts
11
Certificate System Subsystems
12
Considerations before Migration
13
Setting up Certificate System 8.0 Subsystems
17
Installing New Certificate System Subsystem Instances
17
Default File and Directory Locations for Certificate System Subsystems
21
Default CA Instance Information
21
Default RA Instance Information
22
Default DRM Instance Information
22
Default OCSP Instance Information
23
Default TKS Instance Information
24
Default TPS Instance Information
24
Shared Certificate System Subsystem File Locations
26
Migrating a CA Instance to Certificate System
27
Flush the Request Queue
27
Migrating the Security Databases
27
Option 1: Security Databases to Security Databases Migration
27
Option 2: Security Databases to HSM Migration
29
Option 3: HSM to Security Databases Migration
32
Option 4: HSM to HSM Migration
34
Migrating Subsystem Password Stores
37
Migrating Passwords from 7.1
37
Migrating Passwords from 7.2 and 7.3
38
Migrating the LDAP Database
39
Migrating Custom Cs.cfg Settings and Other Data
45
Restarting the CA Instance
46
Setting Custom Configuration in the Console
47
Verifying the CA Migration
47
Migrating an RA to 8.0
49
Dumping the 7.3 Databases
49
Preparing 7.3 Security Databases
49
Importing the 7.3 SQL Database Information into the 8.0 SQL Database
50
Migrating the 7.3 Security Databases to the 8.0 RA
51
Migrating Passwords
52
Migrating Custom Configuration
52
Restarting the RA Instance
52
Verifying the RA Migration
52
Migrating a DRM Instance to Certificate System
53
Option 1: Security Databases to Security Databases Migration
53
Migrating the Security Databases
53
Option 2: Security Databases to HSM Migration
55
Option 3: HSM to Security Databases Migration
58
Option 4: HSM to HSM Migration
61
Migrating Passwords from 7.1
64
Migrating the LDAP Database
66
Migrating Custom Cs.cfg and Other Data Settings
70
Restarting the DRM Instance
71
Verifying the DRM Migration
71
Option 2: Security Databases to HSM Migration
75
Option 3: HSM to Security Databases Migration
78
Option 4: HSM to HSM Migration
80
Migrating Passwords from 7.1
83
Setting Custom Configuration in the Console
71
Migrating the LDAP Database
85
Migrating Custom Data and Settings
89
Restarting the OCSP Instance
89
Setting Custom Configuration in the Console
89
Verifying the OCSP Migration
90
Option 2: Security Databases to HSM Migration
93
Option 3: HSM to Security Databases Migration
97
And Tkstransportcert.b64, Respectively.
98
And Tks_Master_Key_V2 Is the Tks_Master_Key_Version_Name
101
In this Example, 02 Is the Tks_Master_Key_Version_ Number, Mu Is the Old_Hsm_Slot_Name
101
Line. a Tks.mk_Mappings Value Looks Like the Following
101
Migrate Symmetric Keys from the 7.X TKS Instance. Two Things Are Required
101
On the 7.X TKS Instance
101
Option 4: HSM to HSM Migration
101
Copies of All Files (There Is at Least One) Containing the Wrapped Master Keys on the Old HSM; for Example, Tks_Master_Key_V2.Txt
102
Note
102
Tkstool -W Option
102
System /Etc/Subsystem_Name Directory
101
Tks.mk_Mappings.#02#01=Mu:tks_Master_Key_V2
101
Tks_Master_Key_Version_Number #01= Old_Hsm_Slot_Name:tks_Master_Key_Version_Name
101
Copy the Extracted Public/Private Key Pairs from the 7.X Server to the 8.0 Server
102
Cp Old_Server_Root/Alias/Servercert.p12 /Var/Lib/New_Tks_Instance/Alias/Servercert.p12
102
Extract the Public Key of the "Old_Hsm_Slot_Name:casigningcert Cert-Old_Tks_Instance" and "Old_Hsm_Slot_Name:tkstransportcert" Cert-Old_Tks_Instance" from the
102
Set the LD_LIBRARY_PATH Environment Variable to Search the Certificate System Libraries
102
Ld_Library_Path=Old_Server_Root/Bin/Cert/Lib
102
Export LD_LIBRARY_PATH
102
Use the Certificate System 7.X Certutil Tool to Identify the Old HSM Slot Name
102
Migrating Passwords from 7.1
105
Migrating the LDAP Database
106
Restarting the TKS Instance
111
Migrating Custom Cs.cfg Settings and Other Data
111
Setting Custom Configuration in the Console
111
Migrating the Security Databases
115
Option 1: Security Databases to Security Databases Migration
115
Option 2: Security Databases to HSM Migration
117
Option 3: HSM to Security Databases Migration
119
Option 4: HSM to HSM Migration
121
Migrating the TPS Configuration
123
Migrating Passwords
123
Restarting the TPS Instance
124
Advertisement
Advertisement
Related Products
Red Hat CERTIFICATE SYSTEM 7.0 - MIGRATION GUIDE
Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION
Red Hat CERTIFICATE 7.1 ADMINISTRATOR
Red Hat LINUX 7.2 - S-390
Red Hat LINUX 7.1 - PSERIES
Red Hat CERTIFICATE SYSTEM 7.2 - AGENT GUIDE
Red Hat DIRECTORY SERVER 7.1 SP7 - S
Red Hat Application Server
Red Hat APPLICATION SERVER - JONAS
Red Hat APPLICATION STACK 1.1 RELEASE
Red Hat Categories
Software
Server
Desktop
Storage
More Red Hat Manuals
Login
Sign In
OR
Sign in with Facebook
Sign in with Google
Upload manual
Upload from disk
Upload from URL