1ipa-kra-install(1)             IPA Manual Pages             ipa-kra-install(1)
2
3
4

NAME

6       ipa-kra-install - Install a KRA on a server
7

SYNOPSIS

9   DOMAIN LEVEL 0
10       ipa-kra-install [OPTION]... [replica_file]
11
12   DOMAIN LEVEL 1
13       ipa-kra-install [OPTION]...
14

DESCRIPTION

16       Adds a KRA as an IPA-managed service. This requires that the IPA server
17       is already installed and configured, including a CA.
18
19       The KRA (Key Recovery Authority) is a component used to securely  store
20       secrets  such as passwords, symmetric keys and private asymmetric keys.
21       It is used as the back-end repository for the IPA Password Vault.
22
23       In a domain at domain level  0,  ipa-kra-install  can  be  run  without
24       replica_file  to  add  KRA  to the existing CA, or with replica_file to
25       install the KRA service on the replica.  ipa-kra-install  will  contact
26       the  CA  to  determine  if  a KRA has already been installed on another
27       replica, and if  so,  will  exit  indicating  that  a  replica_file  is
28       required.
29
30       The  replica_file  is created using the ipa-replica-prepare utility.  A
31       new replica_file should be generated on the master IPA server after the
32       KRA  has  been  installed and configured, so that the replica_file will
33       contain the master KRA configuration and system certificates.
34
35       In a domain at domain level 1, ipa-kra-install can be used to  add  KRA
36       to  the  existing  CA,  or to install the KRA service on a replica, and
37       does not require any replica file.
38
39       KRA  can  only  be  removed  along  with  the   entire   server   using
40       ipa-server-install --uninstall.
41

OPTIONS

43       -p DM_PASSWORD, --password=DM_PASSWORD
44              Directory Manager (existing master) password
45
46       --no-host-dns
47              Do not use DNS for hostname lookup during installation
48
49       -U, --unattended
50              An unattended installation that will never prompt for user input
51
52       -v, --verbose
53              Enable debug output when more verbose output is needed
54
55       -q, --quiet
56              Output only errors
57
58       --log-file=FILE
59              Log to the given file
60

EXIT STATUS

62       0 if the command was successful
63
64       1 if an error occurred
65
66
67
68IPA                               May 10 2017               ipa-kra-install(1)
Impressum