migrate internal ca