8.4.0 was replaced by 8.4.1. For more information, see Release note Certificate Manager 8.4.1. 

1. Make a backup copy of these folders before applying any changes:

   1. <cm-server-home>/config

   2. <cm-server-home>/lib

2. On the server(s) running the Nexus CF, Nexus CIS, or Nexus SNMP services:

   1. Do the configuration changes in <cm-server-home>/config/ described in the respective files under the <server> folder.

   2. Remove the following files from <cm-server-home>/config:
      • requestformats/httpclient.conf
      • http.conf
3. The suggested default log levels for CM-SNMP has been reduced from FINEST to INFO. If you use CM-SNMP and want to change to the new default values, change this in the file <cm-server-home>/config/snmplog.properties.
4. The following deprecated modifiers have been replaced or removed. If you use customized format files, make sure that none of the deprecated modifiers are used.
   1. These deprecated modifiers have been replaced:
      • SubjectKeyIdAdder > SubjectKeyIdentifierModifier
      • ScepUniqueness > RenewalAllowed
      • AltNameModifier > SubjectAltNameModifier
   2. These deprecated modifiers have been removed:
      • CheckCertWithSubject
      • CisFailoverModifier
      • DynamicValidity
      • InputStringBoundChecker
      • MonetaryLimitAttributeModifier
      • PublicKeyHash
      • RelativeValidity
      • ScepUniqueness
      • SubjectIdentifierSs

1. Make a backup copy of these folders before applying any changes:

   1. <cm-server-home>/config

   2. <cm-server-home>/lib

2. On the server(s) running the Nexus CF, Nexus CIS or Nexus SNMP services:

   1. Do the configuration changes in <cm-server-home>/config/ described in the respective files under the <server> folder.

      note

       
      Note the important changes described in the file changes-formats.txt. The file is located here: <Upgrade\Upgrade from CM 8.0.x to 8.1.0\server>.

      The tool used in changes-formats.txt requires updated lib files. Therefore those instructions should be executed after the new jar files has been replace in the final upgrade instruction.

   2. From Upgrade files CM 8.1.0/server/inputviews, add the following files to <cm-server-home>/inputviews, or replace if any of these files already exist:
      • acme-account-reg-search.conf
      • acme-prereg-search.conf
      • countries.conf
      • device-cert-registration.conf
      • estsecretsearch.conf

Do the following:

1. Shut down all the Certificate Manager clients.

2. Make sure Java SE 17 is installed and set as default Java on the system. Certificate Manager clients can be run on both 32-bit and 64-bit JDKs with the following limitations:

   1. Linux:
      64-bit Java is required in order to use clients with Personal.

   2. Windows:
      After the upgrade, if a javaw.exe binary exists under the C:\Windows\SysWOW64 folder, clients will continue to run on 32-bit Java even if default JDK is 64-bit. Remove this binary (and javaws.exe, java.exe) in order to run the clients on 64-bit Java.

3. Backup the <cm-client-home>/config folder.

4. Uninstall the Certificate Manager clients components, see Uninstall Certificate Manager server components and clients. 

   1. On Windows use "Programs and Features" to uninstall "Certificate Manager Clients Components".
   2. On Linux, run <cm-client-home>/install/setup.sh -u.

5. Remove any remaining hotfix jar files in the <cm-client-home>/lib folder.

   1. On Linux, if there is a <cm-client-home>/P11 folder, backup any config file with customizations to Personal Desktop Client and then delete the folder.

6. Install the new version of the clients, included in the delivery of Certificate Manager.

7. Apply any customizations to the new configuration files in the <cm-client-home>/config folder.

The officer role "Use AWB" is now used for read-only access to the AWB and no longer has permission to do manual builds of CRLs and CILs. Instead, the role "Manual build of CRL and CIL" is needed to perform manual builds.

The officer profile that was previously used by the officer that performed manual builds must now be modified to include the role "Manual build of CRL and CIL".