Validation Key on Chef 11/12 Upgrade

I’m upgrading chef 11 to chef 12.

The documentation says:

“In Chef server version 12, the server supports multiple organizations and
each organization has a unique validation client and key. The upgrade
process will create a new validation client and key and will associate
their names with the newly-created organization.”

Ok, where is the new key on the filesystem on the chef server? I can’t find
it, and the old one no longer seems to work. I’ve run “find / -name
"valid.pem” etc:

395100 4 -rw------- 1 root root 1679 Jan 23 2015
/etc/chef-server/chef-validator.pem
395972 0 lrwxrwxrwx 1 root root 66 Jan 23 2015
/etc/chef/chef-validator.pem ->
/etc/chef/validation_keys/validator-chef-003.dev.slicetest.com.pem
402684 4 -rw-r–r-- 1 root root 1675 Jan 23 2015
/etc/chef/validation_keys/validator-chef01.prod.slicetest.com.pem
684507 4 -rw-r–r-- 1 root root 1675 Feb 4 00:10
/opt/opscode/embedded/lib/ruby/gems/2.1.0/gems/berkshelf-2.0.18/spec/config/validator.pem
1067163 4 -rw-r–r-- 1 root root 1675 Jan 26 18:41
/opt/chef-manage/embedded/lib/ruby/gems/2.2.0/gems/berkshelf-4.0.1/spec/config/validator.pem

None of these files were created recently. The last two files validator
keys deep down there in the ruby gems are different. Could they be it?
Where are they there and not in /opscode/chef ?

Doug