diff --git a/db/migrate/20250319104749_change_p12_password_digest_to_p12_password_in_certificates.rb b/db/migrate/20250319104749_change_p12_password_digest_to_p12_password_in_certificates.rb
index 21b5ad1a0..a61d82b21 100644
--- a/db/migrate/20250319104749_change_p12_password_digest_to_p12_password_in_certificates.rb
+++ b/db/migrate/20250319104749_change_p12_password_digest_to_p12_password_in_certificates.rb
@@ -8,11 +8,13 @@ class ChangeP12PasswordDigestToP12PasswordInCertificates < ActiveRecord::Migrati
     # Only copy data if p12_password_digest exists
     if column_exists?(:certificates, :p12_password_digest)
       # Use direct SQL to copy data
-      execute <<-SQL
-        UPDATE certificates 
-        SET p12_password = p12_password_digest 
-        WHERE p12_password_digest IS NOT NULL
-      SQL
+      safety_assured do
+        execute <<-SQL
+          UPDATE certificates 
+          SET p12_password = p12_password_digest 
+          WHERE p12_password_digest IS NOT NULL
+        SQL
+      end
 
       safety_assured { remove_column :certificates, :p12_password_digest }
     end
@@ -27,11 +29,13 @@ class ChangeP12PasswordDigestToP12PasswordInCertificates < ActiveRecord::Migrati
     # Only copy data if p12_password exists
     if column_exists?(:certificates, :p12_password)
       # Use direct SQL to copy data
-      execute <<-SQL
-        UPDATE certificates 
-        SET p12_password_digest = p12_password 
-        WHERE p12_password IS NOT NULL
-      SQL
+      safety_assured do
+        execute <<-SQL
+          UPDATE certificates 
+          SET p12_password_digest = p12_password 
+          WHERE p12_password IS NOT NULL
+        SQL
+      end
 
       safety_assured { remove_column :certificates, :p12_password }
     end