Hello,

I have a dogtag 10.2.3 acting as a rootCA on a Fedora 21 machine that I want to restore on another machine as part of a disaster recovery procedure. I have read and followed the procedures on migration and recovery described in the following links:

    http://pki.fedoraproject.org/wiki/Recovery#Overview
http://pki.fedoraproject.org/wiki/Migrating_a_CA_using_existing_CA_mechanism
http://pki.fedoraproject.org/wiki/Migrating_a_CA_using_general_mechanism

I might obviously have been doing something wrong at some point because I end up with a CA that cant issue new certificates or cannot reissue the old certificates from the imported database.

Having a DS db dump and the system certificates and keys exported via PKCS12Export, do I need any other elements backed up in order to restore the a root CA? Could someone please point me in the right direction on how to perform the restoration?

Thanks in avance.

_______________________________________________
Pki-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/pki-users

Reply via email to