Hi Scott, > I did an exercise on this, replaced the "democa" in all files in > /etc/openxpki with a customCAName but when I import my issuing CA key and > cert, it gave an error about "Unknown/Undefined Realm". > Please tell me in detail how can i replace the word democa.
As mentioned in my previous post: >> However, the "section key" in the realms configuration (democa in your case) >> is the internal realm name used for grouping PKI Realm data in the database. >> It cannot easily be changed once it has been used. (It is technically >> possible to change this name by performing some database modification but we >> do not recommend to do this unless you exactly know what you are doing.) >> >> When setting up the PKI the realm "key" of each realm should be set to a >> sensible sensible value, e. g. "serverca" or "userca". Do not change the >> name once it has been used. In other words: do not change the internal realm name for an existing PKI Realm. You have the following options: a. create a new PKI Realm (possibly based on the configuration of the existing PKI Realm), possibly importing existing CA signer tokens/certificates and possibly existing EE certificates b. living with the existing short name c. hiding the existing short name by hacking the frontend CSS d. modifying the entire CA database to use a different short name I would recommend approach a or b. Cheers Martin _______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
