Graph Quale

Hello, We are currently running ejbca 6.3.1.1 on Red Hat Enterprise Linux 7.3, but we need to upgrade this RHEL to 8.7. So I would like to ask you. Can we upgrade our existing RHEL to 8.7 and keep running EJBCA 6.3.1.1? (Do we need to upgrade EJBCA to 7.x as well?) If upgrading is going to be difficult, We are considering building a new RHEL 8.7 and EJBCA7.X and migrating the existing data to it, is this possible? (The migration target is all data including certificate issuance history and audit...

Thanks for the reply. I see... Then I'll have to convert it in advance.

Thanks for the reply. I see... Then I'll have to convert it in advance.

I am trying to create a certificate from a der form CSR by "ejbcaClientToolBox.sh EjbcaWsRaCli certreq". (I have been using pem format CSRs and it has been working fine) When I specify the CSR in der format as it is, I get the following error and it terminates abnormally. Do I need any special options? (Or is it not possible to use der-format CSR for certificate creation by AAA?) /opt/ejbca/ejbca/dist/clientToolBox/ejbcaClientToolBox.sh EjbcaWsRaCli certreq EndEntity-AAAAAAAAAAAA 'C=BBB, ST=CCC,...

I will try. Thank you, Tomas.

Thank you for you reply, Tomas. My "Audit log configuration" is as follows. (I haven't made any changes.) Do you know which settings to change to enable "Audit Log"? (I erased it because it was in the way.) Thanks Graph

I attach my cesecore.properties. If it's a simple setting change, I'd like to try it.

Thank you for you reply, Tomas. My "Audit log configuration" is as follows. (I haven't made any changes.) Do you know which settings to change to enable "Audit Log"? ------------ Audit log configuration --------------------- I you want to use integrity protection of the audit log (in the IntegrityProtectedDevice) you must also configure integrity protection in conf/databaseprotection.properties Secure audit log configuration. All security log events are written to all enabled/configured devices....