HP-UX IPSec A.02.01.01 Release Notes for HP-UX 11i v3

Migrating from Version A.01.05
Use the following procedure to migrate to HP-UX IPSec A.02.01.01 from version A.01.05.
1. Stop HP-UX IPSec by entering the ipsec_admin -stop command.
2. If you do not want to re-use IPSec configuration data, complete the procedure described in
“Migrating Without Re-using Configuration Data” (page 14).
3. Install HP-UX IPSec version A.01.07 or A.01.07.02.
4. If you want to re-use IPSec configuration data, run the ipsec_migrate utility and verify
the updated configuration data. See the HP-UX IPSec version A.01.07 or A.01.07.02 release
notes for more information.
5. If the system version is HP-UX 11i v1, upgrade to HP-UX 11i v2 Update 2.
6. Install HP-UX 11i v3 and HP-UX IPSec A.02.01.01 (HP-UX IPSec is a selectable bundle in
HP-UX 11i v3 OEs).
7. If you want to re-use you existing IPSec configuration data, you must complete the following
tasks after installing A.02.01.01:
• Run the ipsec_migrate utility if you want to re-use your existing configuration or
certificate files. See “Using ipsec_migrate” (page 14)
• If you want to use the autoboot feature to automatically start HP-UX IPSec at system
boot-up time, enter the following command:
ipsec_config add startup -autoboot ON
• If you are using security certificates, modify the CRL retrieval method. See “Modifying
the Baltimore CRL Retrieval Method” (page 15) or “Modifying the VeriSign CRL
Retrieval Method” (page 15).
Migrating to HP-UX IPSec A.02.01.01 13