See below for the PKI Hub bugs fixed by Cryptographic Security Platform 1.2.0.

Upgrade process is not idempotent (EDM-18747)

Due to behavior in the drain step, this upgrade path is not idempotent.

From version

To version

Cryptographic Security Platform 1.0 - PKI Hub 1.1

Cryptographic Security Platform 1.1 - PKI Hub 1.2

Installations with Certificate Enrollment Gateway cannot be restored (EDM-18536)

PKI Hub installations with a deployed Certificate Enrollment Gateway do not support Restoring PKI Hub.

Workaround:

  1. Contact Entrust support for a new version of the csf-backup-restore.sh script
  2. Open a user session in any of the PKI Hub installation nodes.
  3. Run the following commands to install the script. 
    sudo cp --force csf-backup-restore.sh /opt/entrust/scripts/rhel/
    sudo chmod 550 /opt/entrust/scripts/rhel/csf-backup-restore.sh
    sudo chown sysadmin:edm /opt/entrust/scripts/rhel/csf-backup-restore.sh
  4. Follow the steps described in Restoring PKI Hub to restore the state.