Your installation must meet the following requirements for upgrading to CSP 1.0.0.

Required platform version for upgrading

You need one of the following installations.

Product

Version

PKI Hub

1.0.0

Entrust Deployment Manager 

2.0.2

Required solution versions for upgrading

When upgrading from Entrust Deployment Manager 2.0.2, ensure the installed solutions have been upgraded to the following versions.

Solution

Version

CA Gateway

3.0.4

Timestamping Authority

2.1.1

Certificate Manager

4.0.4

Entrust Validation Authority

2.4.3​

Certificate Enrollment Gateway

2.1.0

Required installation mode for upgrading

The platform being upgraded must have been installed (in one or several nodes) using the ​prod-mode mode described in Installing CSP.

Required files for upgrading

You need the following files described in Downloading the installation files.

File

Description

PKI Hub 1.1.0 for VMWare vSphere, Hyper-V and Nutanix

ISO installation image for Cryptographic Security Platform. You need this file to upgrade any installation, ISO-based or non-ISO-based. ​

EDM 2.0.x to PKI Hub upgrade tool

RPM package for the upgrade command-line tool.

Required license for upgrading

If your current installation is Entrust Deployment Manager 2.0.2, you need a CSP (Entrust Crypto Security Platform) license. 

When Upgrading from Entrust Deployment Manager 2.0.2, you will use the license file path as argument of the pki-hub-upgrade upgrade command.

Required machine for upgrading

All the installation nodes must meet the Machine requirements.

This release adds Machine requirements to previous Entrust Deployment Manager or PKI Hub installations.

Required IP version for upgrading

As explained in IP address requirements, Cryptographic Security Platform only supports IPv4 and disables IPv6 by default.  Therefore, before upgrading, you must change all DNS server configurations from IPv6 to IPv4. See Configuring the connection of an ISO installation for how to perform this operation in ISO installations.

The upgrade removes all IPv6 addresses from the /etc/hosts file.