Migrating Security Settings Manually
When you migrate an instance manually, the order in which you perform the migration of the
security and the migration of the conguration is dierent to when you migrate using dsmig.If
you migrate the security settings by replacing the default Directory Server 6.0 certicate and key
databases wit the old databases, as described in this section, you must migrate the conguration
rst.
To migrate the security settings manually, perform the following steps:
1. If you have already started using the new instance, stop the instance.
2. Back up the certicate database and key database les on the new instance.
3. Copy the certicate database and key database les from the existing instance to the new
instance.
$cpserverRoot/alias/slapd-serverID-cert8.db instance-path/alias/slapd-cert8db
$cpserverRoot/alias/slapd-serverID-key3.db instance-path/alias/slapd-key3.db
For 5.1 servers and earlier releases of 5.2 servers, the certicate database to be copied is
serverRoot/alias/slapd-serverID-cert7.db.
4. Copy the password le from the existing instance to the new instance.
$cpserverRoot/alias/slapd-serverID-pin.txt instance-path/alias/slapd-pin.txt
5. Update the certicate database password.
$ dsadm set-flags instance-path cert-pwd-prompt=on
6. Copy the certicate mapping le from the existing instance to the new instance.
$cpserverRoot/shared/config/certmap.conf instance-path/alias/certmap.conf
7. If the existing instance uses an external security token, copy the security module database
and the external token library to the new instance.
$cpserverRoot/alias/secmod.db instance-path/alias/secmod.db
8. Start the new instance.
The security conguration attributes are migrated when you migrate the rest of the
conguration attributes. In this sense, migration of the security settings is not complete until
you have migrated the conguration. Migration of the conguration is described in the
following section.
MigratingSecuritySettingsManually
SunJavaSystemDirectoryServerEnterpriseEdition6.0 MigrationGuide • March200748
SunCondential:Registered