IdP2 to IdP3

[David Gersic]

As I understand the documentation and recommendations, this is exactly what you should not do. You should pick one of:


1. Upgrade. That means you copy over your existing IdPv2, then upgrade it in place to IdPv3.


2. New install. Build a new IdPv3 from scratch. Then replace your IdPv2 with IdPv3 in whatever federations you're a member of.


Which is "better" is a matter for debate, I guess.

________________________________
From: users <users-bounces at shibboleth.net> on behalf of James McCartin <jmccartin at loyola.edu>
Sent: Tuesday, February 09, 2016 9:48 AM
To: users at shibboleth.net
Subject: IdP2 to IdP3


I am currently running Shibboleth IdP v2 on Windows 2008.  I want to upgrade to Shibboleth IdP v3 on Windows 2012 R2.  I've installed IdP v3 on a Windows 2012 R2 using same entity ID.



How do I import the signing keys from the v2 server? I have three files in my v2 credentials folder: idp.crt, idp.jks, and idp.key.  There are a number of files in the credentials folder on the new server, but none with the same names.  Which ones do they replace?



I know I could just copy the IdP folder to the new server and do in place upgrade of Shibboleth, but I want to migrate my configuration files to the new formats.



Thanks,



James
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160210/c2f1ef41/attachment-0001.html>