|
From: Tomas G. <to...@pr...> - 2019-08-15 16:19:56
|
Hi Randy, There is quite some documentation on how to upgrade. https://download.primekey.com/docs/EJBCA-Enterprise/6_15_2/Upgrading_EJBCA.html https://blog.ejbca.org/2017/12/the-definitive-ejbca-upgrade-guide.html Regarding migration with export/import, there are a bunch of guides outlining both a process and details to migrate from other CA products. You can follow approximately the same process from EJBCA->EJBCA. https://download.primekey.se/docs/EJBCA-Enterprise/latest/Migrating_from_other_CAs_to_EJBCA.html My colleagues in San Mateo have helped to do quite some such migrations, retaining full history and certificate operations. Regards, Tomas On 2019-08-15 15:55, Randy Yu wrote: > Hi Tomas, > > Is there a set of instructions/steps you can provide that could achieve such data migration straight to the current version? > > -----Original Message----- > From: Tomas Gustavsson <to...@pr...> > Sent: Thursday, August 15, 2019 6:51 AM > To: ejb...@li... > Subject: Re: [Ejbca-develop] EJBCA data export/import to new install > > > Hi Randy, > > Yes we have done such migrations before. > >> Also, if certificate history is taken into account, does EJBCA account >> for serial number collisions? > > Not sure I understand the question, since you have all certificates in the database there can be no (undetected) serial number collisions. In any case the likelihood is extremely small that you would even encounter it. > > Cheers, > Tomas > > On 2019-08-14 18:38, Randy Yu wrote: >> In a plan to move towards a Cloud HSM solution, the requirement is the >> current EJBCA 6.15.x on RHEL7 platform. If we were to move from a >> legacy EJBCA 4.0.16 platform, is there a process to export data for >> the following items and import them to the new platform? >> >> >> >> 1. All historical certificate history 2. All historical CRL history >> >> >> >> Also, if certificate history is taken into account, does EJBCA account >> for serial number collisions? >> >> >> >> Thanks. >> >> >> >> Randy >> >> >> >> _______________________________________________ >> Ejbca-develop mailing list >> Ejb...@li... >> https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flist >> s.sourceforge.net%2Flists%2Flistinfo%2Fejbca-develop&data=02%7C01% >> 7Cyu%40echoworx.com%7C2036b91203d34d0e7da408d7216e9255%7C0445f7885dae4 >> 68ba264cf3ab42eb2d6%7C0%7C0%7C637014631105488088&sdata=DyxfOAZHgw1 >> PcniiANnINUXFyAOeEyhGC03%2F9s8XTyg%3D&reserved=0 >> > > > _______________________________________________ > Ejbca-develop mailing list > Ejb...@li... > https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fejbca-develop&data=02%7C01%7Cyu%40echoworx.com%7C2036b91203d34d0e7da408d7216e9255%7C0445f7885dae468ba264cf3ab42eb2d6%7C0%7C0%7C637014631105488088&sdata=DyxfOAZHgw1PcniiANnINUXFyAOeEyhGC03%2F9s8XTyg%3D&reserved=0 > > > _______________________________________________ > Ejbca-develop mailing list > Ejb...@li... > https://lists.sourceforge.net/lists/listinfo/ejbca-develop > |