EnglishFrenchSpanish

Run servers | Ubuntu > | Fedora > |


OnWorks favicon

ipa-ca-install - Online in the Cloud

Run ipa-ca-install in OnWorks free hosting provider over Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator

This is the command ipa-ca-install that can be run in the OnWorks free hosting provider using one of our multiple free online workstations such as Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator

PROGRAM:

NAME


ipa-ca-install - Install a CA on a server

SYNOPSIS


ipa-ca-install [OPTION]... [replica_file]

DESCRIPTION


Adds a CA as an IPA-managed service. This requires that the IPA server is already
installed and configured.

The replica_file is created using the ipa-replica-prepare utility and should be the same
one used when originally installing the replica.

Alternatively, you can run ipa-ca-install without replica_file to upgrade from CA-less to
CA-full.

OPTIONS


-d, --debug Enable debug logging when more verbose output is needed

-p DM_PASSWORD, --password=DM_PASSWORD
Directory Manager (existing master) password

-w ADMIN_PASSWORD, --admin-password=ADMIN_PASSWORD
Admin user Kerberos password used for connection check

--external-ca
Generate a CSR for the IPA CA certificate to be signed by an external CA.

--external-ca-type=TYPE
Type of the external CA. Possible values are "generic", "ms-cs". Default value is
"generic". Use "ms-cs" to include template name required by Microsoft Certificate
Services (MS CS) in the generated CSR.

--external-cert-file=FILE
File containing the IPA CA certificate and the external CA certificate chain. The
file is accepted in PEM and DER certificate and PKCS#7 certificate chain formats.
This option may be used multiple times.

--ca-signing-algorithm=ALGORITHM
Signing algorithm of the IPA CA certificate. Possible values are SHA1withRSA,
SHA256withRSA, SHA512withRSA. Default value is SHA256withRSA. Use this option with
--external-ca if the external CA does not support the default signing algorithm.

--no-host-dns
Do not use DNS for hostname lookup during installation

--skip-conncheck
Skip connection check to remote master

--skip-schema-check
Skip check for updated CA DS schema on the remote master

-U, --unattended
An unattended installation that will never prompt for user input

EXIT STATUS


0 if the command was successful

1 if an error occurred

Use ipa-ca-install online using onworks.net services


Ad


Ad