Installing Custom CA

Table of Contents Overview Step 1 PKI 10.3.x or older PKI 10.4.x or newer Step 2 PKI 10.3.x or older PKI 10.4.x or newer

Overview

This page describes the process to install CA in two steps:

• installation
• configuration

Between these steps the files that have been deployed into the instance/subsystem folder can be customized.

Step 1

PKI 10.3.x or older

Prepare a deployment configuration file and enable the pki_skip_configration parameter, for example:

[CA]
pki_admin_email=caadmin@example.com
pki_admin_name=caadmin
pki_admin_nickname=caadmin
pki_admin_password=Secret.123
pki_admin_uid=caadmin

pki_client_database_password=Secret.123
pki_client_database_purge=False
pki_client_pkcs12_password=Secret.123

pki_ds_base_dn=dc=ca,dc=example,dc=com
pki_ds_database=ca
pki_ds_password=Secret.123

pki_security_domain_name=EXAMPLE
pki_token_password=Secret.123

pki_skip_configuration=True

Then execute:

$ pkispawn -f ca.cfg -s CA

PKI 10.4.x or newer

Prepare a deployment configuration file and run pkispawn with the --skip-configuration option:

$ pkispawn -f ca.cfg -s CA --skip-configuration

Step 2

PKI 10.3.x or older

Reuse the same deployment configuration file but set the pki_skip_installation parameter, for example:

[CA]
pki_admin_email=caadmin@example.com
pki_admin_name=caadmin
pki_admin_nickname=caadmin
pki_admin_password=Secret.123
pki_admin_uid=caadmin

pki_client_database_password=Secret.123
pki_client_database_purge=False
pki_client_pkcs12_password=Secret.123

pki_ds_base_dn=dc=ca,dc=example,dc=com
pki_ds_database=ca
pki_ds_password=Secret.123

pki_security_domain_name=EXAMPLE
pki_token_password=Secret.123

pki_skip_installation=True

Then execute:

$ pkispawn -f ca.cfg -s CA

PKI 10.4.x or newer

Reuse the same deployment configuration file then run pkispawn with the --skip-installation option:

$ pkispawn -f ca.cfg -s CA --skip-installation