1ipa-kra-install(1)             IPA Manual Pages             ipa-kra-install(1)
2
3
4

NAME

6       ipa-kra-install - Install a KRA on a server
7

SYNOPSIS

9       ipa-kra-install [OPTION]...
10

DESCRIPTION

12       Adds a KRA as an IPA-managed service. This requires that the IPA server
13       is already installed and configured, including a CA.
14
15       The KRA (Key Recovery Authority) is a component used to securely  store
16       secrets  such as passwords, symmetric keys and private asymmetric keys.
17       It is used as the back-end repository for the IPA Password Vault.
18
19       Domain level 0 is not supported anymore.
20
21       ipa-kra-install can be used to add  KRA  to  the  existing  CA,  or  to
22       install the KRA service on a replica.
23
24       KRA   can   only   be  removed  along  with  the  entire  server  using
25       ipa-server-install --uninstall.
26

OPTIONS

28       -p DM_PASSWORD, --password=DM_PASSWORD
29              Directory Manager (existing master) password
30
31       --no-host-dns
32              Do not use DNS for hostname lookup during installation
33
34       -U, --unattended
35              An unattended installation that will never prompt for user input
36
37       -v, --verbose
38              Enable debug output when more verbose output is needed
39
40       -q, --quiet
41              Output only errors
42
43       --log-file=FILE
44              Log to the given file
45
46       --pki-config-override=FILE
47              File containing overrides for KRA installation.
48

EXIT STATUS

50       0 if the command was successful
51
52       1 if an error occurred
53
54
55
56IPA                               May 10 2017               ipa-kra-install(1)