Federation Manager Guide › SSL Administration for Federation Manager › How to Migrate SSL Keys and Certificates › Migrate or Export SSL Keys and Certificates

Migrate or Export SSL Keys and Certificates

Complete the SSL key or certificate file migration by running the migratessl utility.

To complete the migration or export of key and certificate files

1. Import the Certificate Authority certificate that originally signed the SSL certificate you are migrating.
   1. On the system from which you are migrating, export the CA certificate using the Federation Manager UI.
   2. On the new system to which you are migrating, import the CA certificate using the Federation Manager UI.
2. Open a command window on the new system where you copied the existing key or certificate files.
3. Navigate to the folder where you copied the components.
4. Specify the migratessl command with the necessary command arguments. Refer to the list of migration tool command arguments for all the options.

   Examples

   • To migrate the SSL server.key for Apache SSL connections, enter:

     migratessl.bat -op migrate -keytype Apache 
     -sourcefile server.key -certfile server.crt
     -sourcever 12.0 -sourceos Windows -oldpwd admin1
     -newpwd admin2 -issueralias trustedca
     

   • To migrate a key/cert file for Tomcat SSL connections, enter:

     migratessl.sh -op migrate -keytype Tomcat
     -sourcefile tomcat.keystore -sourcever 12.1
     -sourceos UNIX -issueralias trustedca 
     -oldpwd admin1 -newpwd admin2
     

   • To export a key/cert file for Tomcat SSL connections, enter:

     migratessl.sh -op export -keytype Tomcat
     -sourcefile tomcat.keystore -sourcever 12.1
     -sourceos UNIX  -dest ca/federationmgr/secure-proxy/
     SSL/keys/ -oldpwd admin1 -newpwd admin2
     

If you are migrating SSL keys and certificates as part of an entire configuration migration, return to Migrate a Federation Manager Configuration to a New System to complete the process.