You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: Migration-Scripts/Legacy-IIS/LegacyIISMigrationGuide.md
+13-1Lines changed: 13 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,9 +1,12 @@
1
1
# Built-in IIS Certificate Store Type Migration Guide
2
2
3
-
As of Keyfactor Command v11, the built-in IIS certificate store types (IIS Personal, IIS Roots, and IIS Revoked) have been deprecated. This guide will instruct you on how to migrate the built-in IIS certificate store types to the open source iis-orchestrator certificate store types (IISU and WinCert) that can be found on the [Keyfactor GitHub page](https://github.com/Keyfactor/iis-orchestrator).
3
+
As of Keyfactor Command v11, the built-in IIS certificate store types (IIS Personal, IIS Roots, and IIS Revoked) have been deprecated.
4
+
Before upgrading to v11, if you have existing built-in IIS certificate stores they should be migrated to one of the new IIS store types.
5
+
This guide will instruct you on how to migrate the built-in IIS certificate store types to the open source iis-orchestrator certificate store types: IISU and WinCert.
4
6
5
7
# Prerequisites
6
8
9
+
- Upgrade to Keyfactor Command >=10.4 (and < 11). This version or later is required to allow for the legacy IIS stores to be upgraded to both IISU and WinCert.
7
10
- All orchestrators that are currently being used to orchestrate the built-in IIS store types must support the certificate store type that the built-in stores are being migrated to (IISU, WinCert, or both).
8
11
- Ensure that you have a restorable database backup created before you begin the upgrade.
9
12
@@ -15,12 +18,17 @@ There are six SQL scripts that are needed for this migration:
15
18
16
19
<summary>Creation Scripts</summary>
17
20
21
+
<b>These scripts can be used to create the Store Type definitions, if they do not already exist.</b>
22
+
They may have already been created using `kfutil` or the Command portal.
This script creates a 'WinCert' certificate store copy for every 'IIS Revoked' and 'IIS Roots' certificate store. It will also create a 'WinCert' version of every 'IIS Revoked' and 'IIS Roots' certificate store container.
35
44
36
45
**Notes**
@@ -48,6 +57,7 @@ This script accepts three parameters that allow configuration of WinRM:
This script creates an 'IISU' certificate store copy for a provided list of 'IIS Personal' certificate stores. It will also create an 'IISU' version of every 'IIS Personal' certificate store container.
52
62
53
63
**Notes**
@@ -68,6 +78,7 @@ This script accepts four parameters:
This script creates a 'WinCert' certificate store copy for a provided list of 'IIS Personal' certificate stores. It will also create a 'WinCert' version of every 'IIS Personal' certificate store container.
72
83
73
84
**Notes**
@@ -92,6 +103,7 @@ This script accepts four parameters:
92
103
93
104
## DeleteIISStores
94
105
106
+
[DeleteIISStores.sql](./DeleteIISStores.sql)
95
107
This script will delete all IIS Personal, IIS Roots, and IIS Revoked certificate store types, certificate stores, and certificate store containers.
0 commit comments