Kamal Perera wrote:
Dear all,

Seeking your kind advices.

If the requirement is for having a scalable corporate CA only, is it
possible to get this requirement fulfilled with DogTag only, or install
FreeIPA and use the CA functionality only.

IPA limits dogtag to only those features it is interested in. This has been expanding recently but you still lose some functionality.

IMHO if all you want is a CA then managing IPA is overkill.

What are the functional differences and support limitations?

Functionally it depends on what version of IPA you're talking about. Older versions only exposed server certificates. Newer versions support user certifications, custom profiles and more. It is still just a subset of what dogtag supports.

Support from whom? The dogtag community is happy to help (they've always helped us).

rob

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to