HP-UX IPSec A.02.01.01 Release Notes for HP-UX 11i v1 | HP-UX 11i v2, Update 2

Migration Recommendations for HP-UX 11i v1 Customers

HP-UX IPSec version A.02.01.01 also contains changes for compatibility with ARPA Transport

releases. In mid-2007, HP will release the ARPA Transport patch PHNE_35351 on HP-UX 11i

v1. PHNE_35351 will incorporate Transport Optional Upgrade Release (TOUR) functionality

and fix critical defects. All subsequent ARPA Transport patches and releases will include

functionality previously available only with TOUR. On HP-UX 11i v1 systems, versions of HP-UX

IPSec prior to A.02.01.01 will not be compatible with PHNE_35351 and subsequent ARPA

Transport releases. In addition, HP-UX 11i v1 customers who do not upgrade to A.02.01.01 will

be unable to install PHNE_35351 and subsequent ARPA Transport releases.

NOTE: The information in this section applies only to HP-UX 11i v1 systems. On HP-UX 11i

v2 systems, HP-UX IPSec is compatible with all current and future ARPA Transport releases,

including TOUR releases and releases that incorporate TOUR functionality.

HP recommends that HP-UX 11i v1 customers using HP-UX IPSec versions prior to A.02.01.01

upgrade their HP-UX IPSec software as follows:

• HP-UX 11i v1 systems with HP-UX IPSec versions A.02.00 and A.02.01

Migrate to HP-UX IPSec version A.02.01.01 prior to May 2007 so that the version of HP-UX

IPSec on the system will be compatible with PHNE_35351. This will enable you to

immediately install patch PHNE_35351 when it is released.

• HP-UX 11i v1 systems with HP-UX IPSec versions A.01.01 - A.01.07.02

Migrate to HP-UX IPSec version A.02.01.01 at the same time that you install PHNE_35351.

(On HP-UX 11i v1 systems, HP-UX IPSec version A.02.01.01 requires TOUR or PHNE_35351.

If you upgrade to HP-UX IPSec version A.02.01.01 prior to installing PHNE_35351, you will

have to install TOUR.) Note that HP-UX IPSec version A.02.00 introduced a new configuration

utility and database. Although HP provides the ipsec_migrate utility to help you migrate

existing IPSec configuration files to the new database, HP recommends that you allocate

time to verify your IPSec configuration after the migration.

If the system has HP-UX IPSec version A.01.01, A.01.02, A.01.03, A.01.04, or A.01.05 and

you want to reuse your configuration data, you cannot migrate directly to version A.02.01.01.

You must migrate to HP-UX A.02.01.01 in a step-wise manner, by migrating to intermediate

versions (A.01.05 and A.01.07) as described in “Migrating to A.02.01.01” (page 13).

Note that HP-UX IPSec versions A.01.05 and A.01.07 are not compatible with PHNE_35351

(it is not compatible with TOUR 2.0 or subsequent ARPA Transport software releases that

incorporate TOUR functionality, such as PHNE_35351).

Alternatively, you can migrate to HP-UX IPSec version A.02.01.01 prior to May 2007.

However, if you upgrade to HP-UX IPSec version A.02.01.01 prior to installing PHNE_35351,

you must install TOUR 2.0 or later.

Related Information

The latest documentation for HP-UX IPSec is available in English at http://www.docs.hp.com.

Available documents include:

• HP-UX IPSec version A.02.01 Administrator's Guide (J4256–90016)

• HP-UX IPSec version A.02.01 Manpages (PDF and HTML)

• HP-UX IPSec Performance and Sizing Whitepaper

• Using OpenSSL Certificates with HP-UX IPSec A.02.01

Software Availability in Native Languages

The HP-UX IPSec product is available only in the English language.