On 26.05.2016 17:31, Zak Wolfinger wrote:
I’m following the instructions on how to migrate from FreeIPA version 3.0 to 
4.3.  Our 3.0 implementation does NOT have CA running.  We want to enable CA 
Server with 4.3.

Can we enable CA after the migration?  Instructions to do so?


Can we enable CA during the isa-replica-install phase?  The instructions say to 
use —dirsrv-cert-file —dirsrv-pin —http-cert-file —http-pin flags, but 
isa-replica-prepare in version 3 doesn’t seem to support —dirsrv-cert-file.

Thanks for your help!

You cannot install CA together with ipa-replica-install. You have to install replica first and then run ipa-ca-install on the new replica.

I'm not sure but it should be possible to use this options with ipa-replica-install

Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to