HP-UX IPSec A.02.01.01 Release Notes for HP-UX 11i v3

Migrating to HP-UX IPSec A.02.01.01
The following sections list migration procedures for migrating from HP-UX IPSec version A.01.05
or later on an HP-UX 11i or HP-UX 11i v2 system. Contact your HP representative if you are
migrating from HP-UX IPSec version A.01.01, A.01.02, A.01.03, or A.01.04, or if you are upgrading
from an HP-UX 11.0 system.
Migrating from Version A.02.01
Use the following procedure to migrate to HP-UX IPSec A.02.01.01 from version A.02.01.
1. Stop HP-UX IPSec by entering the ipsec_admin -stop command.
2. If the system version is HP-UX 11i v1, upgrade to HP-UX 11i v2 Update 2.
3. Install HP-UX 11i v3 and HP-UX IPSec A.02.01.01 (HP-UX IPSec is a selectable bundle in
HP-UX 11i v3 OEs).
You do not have to migrate configuration data.
Migrating from Version A.02.00
Use the following procedure to migrate to HP-UX IPSec A.02.01.01 from version A.02.00.
1. Stop HP-UX IPSec by entering the ipsec_admin -stop command.
2. If the system version is HP-UX 11i v1, upgrade to HP-UX 11i v2 Update 2.
3. If you do not want to re-use IPSec configuration data, complete the procedure described in
“Migrating Without Re-using Configuration Data” (page 14).
4. Install HP-UX 11i v3 and HP-UX IPSec A.02.01.01 (HP-UX IPSec is a selectable bundle in
HP-UX 11i v3 OEs).
5. If you are not using security certificates, you do not have to migrate configuration data.
If are using security certificates, you must complete the following tasks after installing
A.02.01.01:
• Run the ipsec_migrate utility. See “Using ipsec_migrate” (page 14)
• Modify the CRL retrieval method. See “Modifying the Baltimore CRL Retrieval Method”
(page 15) or “Modifying the VeriSign CRL Retrieval Method” (page 15).
Migrating from Version A.01.07
Use the following procedure to migrate to HP-UX IPSec A.02.01.01 from version A.01.07 or
A.01.07.02.
1. Stop HP-UX IPSec by entering the ipsec_admin -stop command.
2. If the system version is HP-UX 11i v1, upgrade to HP-UX 11i v2 Update 2.
3. If you do not want to re-use IPSec configuration data, complete the procedure described in
“Migrating Without Re-using Configuration Data” (page 14).
4. Install HP-UX 11i v3 and HP-UX IPSec A.02.01.01 (HP-UX IPSec is a selectable bundle in
HP-UX 11i v3 OEs).
5. You must complete the following tasks after installing A.02.01.01:
• Run the ipsec_migrate utility if you want to re-use your existing configuration or
certificate files. See “Using ipsec_migrate” (page 14)
• If you want to use the autoboot feature to automatically start HP-UX IPSec at system
boot-up time, enter the following command:
ipsec_config add startup -autoboot ON
• If you are using security certificates, modify the CRL retrieval method. See “Modifying
the Baltimore CRL Retrieval Method” (page 15) or “Modifying the VeriSign CRL
Retrieval Method” (page 15).
12