CERN Accelerating science

CERN CA Infrastructure upgrade

 
Post date: 
Monday, June 27, 2011 - 12:50
Description: 

 The CERN CA will be stopped as planned (see https://test-static-03.web.cern.ch/service-change/cern-pki-infrastructure-upgrade) on Friday 1st of July from 17:30 (GMT+1) to 21:30(GMT+1) for a PKI infrastructure upgrade. No certificate requests will be processed or saved during this time interval. Certificate revocation list on cern.ch/ca website will be accessible as usual.

This critical step will involve the following operations:

1. Change of the host and major OS upgrade for the CA service

2. Migration to the new Hardware Security Module

3. CA database upgrade and optimization

4. Fix for CRL distribution point paths in Active Directory

5. Installation of FIM CA components

 

Update 19:40: Service is successfully migrated and upgraded, functionality restored at 19:00, users are now able to request certificates as usual.

Effective from date: 
Friday, July 1, 2011 - 17:30
End date: 
Friday, July 1, 2011 - 21:30
Service Element Affected: 
E-Certificate Service
Impact on service: 
Service will be in read-only mode during the intervention
Posted by: 
IT-OIS
Unit responsible for resolution: 
IT Department