Domino CA

[stonesg]

Hi, last year i migrated to certification authority my two Organization Id in a xsp enviroment. I've used it to create every user in the hosted organizations. Now i've added a second server in the domino domain that will replace the first one. Is possible to migrate the ca authority to the second server with all the certification database? How can i do this?

Thanks in advance

 

[CrashTestDomino]

I've tried this, and succeeded only in knackering the environment entirely. Luckily, it was a test environment.

Things which need to move/change are the ICL databases, which are encrypted with the CA server's ID (I think). In addition, there's the $CertificateAuthorities in the Domino directory for the domain - some of this can't be edited directly.

I'd raise this one directly with IBM Tech Support to make sure it's possible, as messing this up might mean total loss of your certifiers (though I guess you already knew that!).

 

[woonjas]

Make sure you do hang on to the certifier id's (store them somewhere safe, but available if needed).



Woonjas
IRC: #notes on EFNet
homepage:

http://woonjas.linuxnerd.org