HP-UX IPSec A.02.01.01 Release Notes for HP-UX 11i v1 | HP-UX 11i v2, Update 2

Migrating to A.02.01.01
The following sections contain procedures for migrating from previous versions of HP-UX IPSec.
NOTE: HP-UX IPSec A.02.01.01 contains changes for compatibility with ARPA Transport. If
you are using HP-UX IPSec on an HP-UX 11i v1 system, see “Migration Recommendations for
HP-UX 11i v1 Customers” (page 18).
Migrating without Reusing Configuration Data
If you do not want to reuse your HP-UX IPSec configuration data, complete the procedure
described in “Installing A.02.01.01 without Reusing Configuration Data” (page 15). You will
need to re-create your configuration data after migrating.
Migrating from Version A.02.01
Use the following procedure to migrate from HP-UX IPSec version A.02.01 to version A.02.01.01:
1. Stop HP-UX IPSec by entering the ipsec_admin -stop command.
2. Install HP-UX IPSec A.02.01.01.
You do not have to migrate configuration data.
Migrating from Version A.02.00
Use the following procedure to migrate from HP-UX IPSec version A.02.00 to version A.02.01.01
and reuse configuration data:
1. Stop HP-UX IPSec by entering the ipsec_admin -stop command.
2. Install HP-UX IPSec A.02.01.01.
3. If you are not using security certificates, you do not have to migrate configuration data.
If are using security certificates, you must complete the following tasks after installing
A.02.01.01:
• Run the ipsec_migrate utility. See “Using ipsec_migrate” (page 15).
• Modify the CRL retrieval method. See “Modifying the Baltimore CRL Retrieval Method”
(page 16) or “Modifying the VeriSign CRL Retrieval Method” (page 16).
Migrating from Version A.01.07
Use the following procedure to migrate from HP-UX IPSec version A.01.07 or A.01.07.02 to
version A.02.01.01 and reuse configuration data:
1. Stop HP-UX IPSec by entering the ipsec_admin -stop command.
2. Install HP-UX IPSec A.02.01.01.
3. You must complete the following tasks after installing A.02.01.01:
• Run the ipsec_migrate utility. See “Using ipsec_migrate” (page 15).
• If you want to use the autoboot feature to automatically start HP-UX IPSec at system
boot-up time, enter the following command:
ipsec_config add startup -autoboot ON
• If you are using security certificates, modify the CRL retrieval method. See “Modifying
the Baltimore CRL Retrieval Method” (page 16) or “Modifying the VeriSign CRL
Retrieval Method” (page 16).
Migrating from Version A.01.06
To migrate from HP-UX IPSec version A.01.06 to version A.02.01.01 and reuse configuration
data, contact your HP support representative.
Migrating to A.02.01.01 13