CA SiteMinder® Federation Standalone Installation and Upgrade Guide › Migrate to CA SiteMinder® Federation Standalone 12.52 › How to Migrate to 12.52 › Migrate SSL Keys and Certificates (optional) › Migrate or Export SSL Keys and Certificates

Migrate or Export SSL Keys and Certificates

Complete the SSL key or certificate file migration by running the migratessl utility.

Follow these steps:

1. Import the Certificate Authority certificate that originally signed the SSL certificate you are migrating.
   1. On the system from which you are migrating, export the CA certificate using the CA SiteMinder® Federation Standalone UI.
   2. On the new system to which you are migrating, import the CA certificate using the CA SiteMinder® Federation Standalone UI.
2. Open a command window on the new system where you copied the existing key or certificate files.
3. Navigate to the folder where you copied the components.
4. Specify the migratessl command with the necessary command arguments. Refer to the list of migration tool command arguments for all the options.

   Examples

   • To migrate the SSL server.key for Apache SSL connections, enter:

     migratessl.bat -op migrate -keytype Apache 
     -sourcefile server.key -certfile server.crt
     -sourcever 12.0 -sourceos Windows -oldpwd admin1
     -newpwd admin2 -issueralias trustedca
     

   • To migrate a key/cert file for Tomcat SSL connections, enter:

     migratessl.sh -op migrate -keytype Tomcat
     -sourcefile tomcat.keystore -sourcever 12.1
     -sourceos UNIX -issueralias trustedca 
     -oldpwd admin1 -newpwd admin2
     

   • To export a key/cert file for Tomcat SSL connections, enter:

     migratessl.sh -op export -keytype Tomcat
     -sourcefile tomcat.keystore -sourcever 12.1
     -sourceos UNIX  -dest ca/federationmgr/secure-proxy/
     SSL/keys/ -oldpwd admin1 -newpwd admin2
     

If you are migrating SSL keys and certificates as part of an entire configuration migration, complete the migration process by reactivating partnerships.