Federation Security Services Guide › Signing and Encrypting Messages to Secure Federated Transactions › Migrate AM.keystore and Update smkeydatabase › How To Migrate the Key Databases

How To Migrate the Key Databases

Use the migratekeystore tool to update your pre 6.0 SP5/6.x QMR 5 PKI infrastructure.

1. Do the following prior to running the migratekeystore tool:
   • Copy the AM.keystore file from the Web Agent machine to the Policy Server with the smkeydatabase.
   • Gather any passwords associated with client certificates that were in the AM.keystore. You will need to specify these passwords during the migration.
2. Run the migratekeytool utility.