In Q3-Q4 2011 CERN CA infrastructure will be upgraded to propose more features to the end-user community as well as to increase overall security of the PKI infrastructure. The process will be executed in several steps starting from 1st of July when the service will be migrated to a new Hardware security module and new OS platform.

Changes and steps to be accumulated and posted in this submission.

01/07/2011

1. Change of the host and major OS upgrade for the CA service

2. Migration to the new Hardware Security Module

3. CA database upgrade and optimization

4. Fix for CRL distribution point paths in Active Directory

5. Installation of FIM CA components

13/07/2011

1. Website migration (IP address change)