On Fri, 2023-04-07 at 15:14 -0400, Rob Crittenden via FreeIPA-users wrote:
Given how early it failed it doesn't look like it actually did any configuration except some basic setup of the security domain.
IPA determines whether a KRA is configured by running:
# pki-server subsystem-show kra
In your current state I'd expect the output to be:
Subsystem ID: kra Instance ID: pki-tomcat Enabled: True
You should be able to remove it with:
# pkidestroy -s KRA -i pki-tomcat
To confirm it's gone re-run the pki-server command and you should see:
Yes! That took care of it. Thank you so much!