Step 5: Migrating Password Cache
Data
The password information for the Certificate System subsystems are saved in a special
password file. In Certificate System 6.x versions, these were kept in the
pwcache.db
file. The
contents of the password file must be decrypted and listed using the
PasswordCache
tool in the
6.x subsystem instance. Then, this information must be used to build the contents of the 7.3
password.conf
file.
Every subsystem password file must be migrated separately, but the migration procedure is the
same for all Certificate System subsystem instances.
1. Log into the 6.x server as the Certificate System user for that machine, and open the
config/
directory.
cd old_server_root/cert-old_instance/config/
2. Run the
PasswordCache
tool from the
tools
directory to retrieve the passwords from the
database.
old_server_root/bin/cert/tools/PasswordCache old_passwordcache_password -d
old_server_root/alias
-P cert-old_instance-old_hostname- -c pwcache.db list
This lists the information stored in the password cache.
cert/key prefix = cert-old_instance-old_hostname-
path = old_server_root/alias
about to read password cache
----- Password Cache Content -----
internal : password
Internal LDAP Database : passwordldap
3. Use the listed tags and passwords to create the
password.conf
file. For example:
internal=password
Internal LDAP Database=passwordldap
4. If the 6.x server instance used the
password.conf
file to start the server instance
automatically, then this file must also be migrated to the 7.3 server instance.
cp old_server_root/cert-old_instance/config/password.conf
/var/lib/instance_ID/conf/password.conf
Chapter 6.
51
