Sun Microsystems 8190994 Manual

A SERVICE OF

next previous

Migrating Security Settings Manually

When you migrate an instance manually, the order in which you perform the migration of the

security and the migration of the conguration is dierent to when you migrate using dsmig.If

you migrate the security settings by replacing the default Directory Server 6.0 certicate and key

databases wit the old databases, as described in this section, you must migrate the conguration

rst.

To migrate the security settings manually, perform the following steps:

1. If you have already started using the new instance, stop the instance.

2. Back up the certicate database and key database les on the new instance.

3. Copy the certicate database and key database les from the existing instance to the new

instance.

$cpserverRoot/alias/slapd-serverID-cert8.db instance-path/alias/slapd-cert8db

$cpserverRoot/alias/slapd-serverID-key3.db instance-path/alias/slapd-key3.db

For 5.1 servers and earlier releases of 5.2 servers, the certicate database to be copied is

serverRoot/alias/slapd-serverID-cert7.db.

4. Copy the password le from the existing instance to the new instance.

$cpserverRoot/alias/slapd-serverID-pin.txt instance-path/alias/slapd-pin.txt

5. Update the certicate database password.

$ dsadm set-flags instance-path cert-pwd-prompt=on

6. Copy the certicate mapping le from the existing instance to the new instance.

$cpserverRoot/shared/config/certmap.conf instance-path/alias/certmap.conf

7. If the existing instance uses an external security token, copy the security module database

and the external token library to the new instance.

$cpserverRoot/alias/secmod.db instance-path/alias/secmod.db

8. Start the new instance.

The security conguration attributes are migrated when you migrate the rest of the

conguration attributes. In this sense, migration of the security settings is not complete until

you have migrated the conguration. Migration of the conguration is described in the

following section.

MigratingSecuritySettingsManually

SunJavaSystemDirectoryServerEnterpriseEdition6.0 MigrationGuide • March200748

SunCondential:Registered