Skip to content

Commit 77ea006

Browse files
committed
additional legacy migration notes
1 parent 85b63a6 commit 77ea006

File tree

1 file changed

+13
-1
lines changed

1 file changed

+13
-1
lines changed

Migration-Scripts/Legacy-IIS/LegacyIISMigrationGuide.md

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,12 @@
11
# Built-in IIS Certificate Store Type Migration Guide
22

3-
As of Keyfactor Command v11, the built-in IIS certificate store types (IIS Personal, IIS Roots, and IIS Revoked) have been deprecated. This guide will instruct you on how to migrate the built-in IIS certificate store types to the open source iis-orchestrator certificate store types (IISU and WinCert) that can be found on the [Keyfactor GitHub page](https://github.com/Keyfactor/iis-orchestrator).
3+
As of Keyfactor Command v11, the built-in IIS certificate store types (IIS Personal, IIS Roots, and IIS Revoked) have been deprecated.
4+
Before upgrading to v11, if you have existing built-in IIS certificate stores they should be migrated to one of the new IIS store types.
5+
This guide will instruct you on how to migrate the built-in IIS certificate store types to the open source iis-orchestrator certificate store types: IISU and WinCert.
46

57
# Prerequisites
68

9+
- Upgrade to Keyfactor Command >=10.4 (and < 11). This version or later is required to allow for the legacy IIS stores to be upgraded to both IISU and WinCert.
710
- All orchestrators that are currently being used to orchestrate the built-in IIS store types must support the certificate store type that the built-in stores are being migrated to (IISU, WinCert, or both).
811
- Ensure that you have a restorable database backup created before you begin the upgrade.
912

@@ -15,12 +18,17 @@ There are six SQL scripts that are needed for this migration:
1518

1619
<summary>Creation Scripts</summary>
1720

21+
<b>These scripts can be used to create the Store Type definitions, if they do not already exist.</b>
22+
They may have already been created using `kfutil` or the Command portal.
23+
1824
## CreateIISUCertStoreType
1925

26+
[CreateIISUCertStoreType.sql](./CreateIISUCertStoreType.sql)
2027
This script creates the IISU certificate store type.
2128

2229
## CreateWinCertStoreType
2330

31+
[CreateWinCertStoreType.sql](./CreateWinCertStoreType.sql)
2432
This script creates the WinCert certificate store type.
2533

2634
</details>
@@ -31,6 +39,7 @@ This script creates the WinCert certificate store type.
3139

3240
## UpgradeIISRevokedAndRootsToWinCert
3341

42+
[UpgradeIISRevokedAndRootsToWinCert.sql](./UpgradeIISRevokedAndRootsToWinCert.sql)
3443
This script creates a 'WinCert' certificate store copy for every 'IIS Revoked' and 'IIS Roots' certificate store. It will also create a 'WinCert' version of every 'IIS Revoked' and 'IIS Roots' certificate store container.
3544

3645
**Notes**
@@ -48,6 +57,7 @@ This script accepts three parameters that allow configuration of WinRM:
4857

4958
## UpgradeIISPersonalToIISU
5059

60+
[UpgradeIISPersonalToIISU.sql](./UpgradeIISPersonalToIISU.sql)
5161
This script creates an 'IISU' certificate store copy for a provided list of 'IIS Personal' certificate stores. It will also create an 'IISU' version of every 'IIS Personal' certificate store container.
5262

5363
**Notes**
@@ -68,6 +78,7 @@ This script accepts four parameters:
6878

6979
## UpgradeIISPersonalToWinCert
7080

81+
[UpgradeIISPersonalToWinCert.sql](./UpgradeIISPersonalToWinCert.sql)
7182
This script creates a 'WinCert' certificate store copy for a provided list of 'IIS Personal' certificate stores. It will also create a 'WinCert' version of every 'IIS Personal' certificate store container.
7283

7384
**Notes**
@@ -92,6 +103,7 @@ This script accepts four parameters:
92103

93104
## DeleteIISStores
94105

106+
[DeleteIISStores.sql](./DeleteIISStores.sql)
95107
This script will delete all IIS Personal, IIS Roots, and IIS Revoked certificate store types, certificate stores, and certificate store containers.
96108

97109
</details>

0 commit comments

Comments
 (0)