Important information on upgrading to Sentry CA 3.7 from a previous version.
Originally Published: 2001-07-09
Article Number
Applies To
Keon Certificate Authority
TechNote 0206
Issue
This applies to existing Sentry CA 3.5 and 3.6 installations.
Resolution
1) When installing Sentry CA 3.7, the Common Name for the Root CA and the
Administrative CA must be different from the existing installation. This is
because the databases will be merged and two CAs within one installation
of Sentry CA may not have the same Common Name.
2) The database merge will combine the original ACL rules with the new ACL
rules. This generally means access to /ca/ will be open to certificates issued
by the original Administrative CA and the 3.7 Administrative CA. If desired, the
ACL rule can be changed to allow access only to the certificates issued by the
original Administrative CA. At this point, the 3.7 Administrative CA is no longer
used and can be suspended.
It is recommended to contact RSA Support for assistance in planning/deploying an upgraded CA installation.
Related Articles
How to upgrade to Sentry CA 3.6 from a previous version of Sentry CA. 3Number of Views Activity Node Excludes Previous Approvers Without Exclusion Settings in RSA Governance & Lifecycle 1Number of Views Attribute Change Rule reverts to a previous version after making changes in RSA Identity Governance & Lifecycle 23Number of Views How to rollback to a previous version in case of virtual application patch failures in RSA Identity Governance & Lifecycle… 64Number of Views RSA Access Manager Agent SharePoint Ticket Service sends duplicate runtimeAPI WebServices Requests 15Number of Views
Trending Articles
Passwordless Authentication in Windows MFA Agent for Active Directory – Quick Setup Guide RSA Authentication Manager Upgrade Process RSA Authentication Manager 8.9 Release Notes (January 2026) An example of SSO using SAML and ADFS with RSA Identity Management and Governance 6.9.x RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?