HP-UX IPSec version A.02.01 Administrator's Guide

Migrating from Previous Versions of HP-UX IPSec
Post-Installation Migration Instructions
Appendix C254
Post-Installation Migration Instructions
Configuration File
Beginning with version A.02.00, HP-UX IPSec stores configuration data
in a configuration database instead of a policy file. To migrate a policy
configuration file from an earlier version of HP-UX IPSec to a
configuration database, use the following procedure.
Step 1. Run the ipsec_migrate utility after you have installed HP-UX IPSec
A.02.01. For example:
/usr/sbin/ipsec_migrate [-p
policy_file ]
Where:
policy_file is the optional name of the input policy file to migrate,
such as /var/adm/policies.txt. Use this option when migrating a
policy file from an HP-UX IPSec version prior to A.02.00. The
ipsec_migrate utility will convert the policy file to a configuration
database file and save it in /var/adm/ipsec/config.db.
If you are migrating from HP-UX IPSec version A.02.00 or A.02.00.01,
the ipsec_migrate utility checks the /var/adm/ipsec/config.db and
/var/adm/ipsec/cainfo.txt files and updates them if needed. Before
updating a file, ipsec_migrate creates a backup copy and saves it in the
file /var/adm/ipsec/backup/config.db.
timestamp or
/var/adm/ipsec/backup/cainfo.txt.
timestamp , as applicable. The
timestamp is in the format dd-mm-yy-hh-mn-ss , where:
dd is the day
mm is the month
yy are the last two digits of the year
hh is the hour
mn is the number of minutes
ss is the number of seconds
The ipsec_migrate utility saves updated files in the appropriate
locations (/var/adm/ipsec/config.db and
/var/adm/ipsec/cainfo.txt). For more information, refer to the
ipsec_migrate (1M) man page.