Data objects and properties migrated from IBM Security Guardium Key Lifecycle Manager

Data objects and properties are migrated from earlier versions of IBM Security Guardium Key Lifecycle Manager, such as 2.5, 2.6, 2.7, and 3.0.

Keystore
The keystore, including all certificates and metadata from earlier versions, are added to the IBM Security Guardium Key Lifecycle Manager, Version 4.2.1 database. The keystore is identified by the config.keystore.name property in the SKLMConfig.properties file.
Devices
All the device information is read from the IBM Security Guardium Key Lifecycle Manager database.
Key groups
The key group information is read from the IBM Security Guardium Key Lifecycle Manager database.
Rollover certificates and key groups
Certificates and key groups from the earlier versions might be marked for future 3592 tape drive administration. The migration program detects and marks these rollovers for future administration with IBM Security Guardium Key Lifecycle Manager, Version 4.2.1.
Metadata
All the metadata information is migrated from the database of the IBM Security Guardium Key Lifecycle Manager earlier version and made usable by the IBM Security Guardium Key Lifecycle Manager, Version 4.2.1 database.
Properties
Properties in the SKLMConfig.properties file are migrated from the IBM Security Guardium Key Lifecycle Manager database. The datastore.properties file is also migrated.

The following properties are replaced in the SKLMConfig.properties file of version 4.2.1:

  • ds8k.acceptUnknownDrives

    The device.AutoPendingAutoDiscovery property replaces this property.

  • drive.acceptUnknownDrives

    The device.AutoPendingAutoDiscovery attribute in the IBM Security Guardium Key Lifecycle Manager database replaces this property.

The following properties are migrated from the SKLMConfig.properties file of version 4.2.1 file to the IBM Security Guardium Key Lifecycle Manager database:
  • drive.default.alias1
  • drive.default.alias2
  • symmetricKeySet (removed from the SKLMConfig.properties file and replaced with an entry for the device group in the IBM Security Guardium Key Lifecycle Manager database)