Chapter 22. Upgrading Certificate System 10 to the latest minor version
To upgrade Red Hat Certificate System 10.0 to the latest minor version, for example 10.1, you need to update the packages and the configuration files.
- Upgrade all packages on the server:
# yum update
During the update, Certificate System configuration files, such as/etc/pki/<instance_name>/subsystem/CS.cfg
and/etc/pki/<instance_name>/server.xml
, are automatically modified to the new version.Log files generated during the Certificate System upgrade are:/var/log/pki/pki-server-upgrade-version.log
/var/log/pki/pki-upgrade-version.log
Note that the version number in the log file's name represent the pki* package version and not the Certificate System version.Note
If Directory Server is installed on a different host, additionally update all packages on that host as well. For details about updating Directory Server, see:- the corresponding chapter in the Red Hat Directory Server Installation G e.
- Red Hat Directory Server Release Notes for notable changes, bug fixes, and known issues in Directory Server.
- Restart the Certificate System instance:
# systemctl restart pki-tomcatd@<instance_name>.service
Note
To migrate from a lower major version, such as 9.7, to Certificate System 10, see Chapter 21, Upgrading from Certificate System 9 to Certificate System 10.