Migrating PKI Server

Overview

This document describes the process to migrate PKI server into a new instance.

Cloning

This mechanism works by cloning the old server to the new one, promoting the new one as master, then decommissioning the old one.

• Migrating PKI 9 to PKI 10

Export and Import

This mechanism works by exporting the database and configuration from the old server, installing a new server with the new configuration, then importing the database to the new server.

• Migrating a CA using general mechanism

• Migrating a CA using existing CA mechanism

• Migrating a CA with HSM using existing CA mechanism

• Database Migration

In-Place Upgrade (Under Development)

This mechanism works by upgrading the database and configuration of the old server, then installing the new server using the upgraded database and configuration.

See the following page:

• Upgrading PKI Database

• Two-Step Installation

• Importing Existing CA Certificate

See Also

• Dogtag 9 to Dogtag 10 Migration

• IPA Migration

• Red Hat Certificate System 8.1.1 Migration Guide