To smooth the transition NIS to FreeIPA, we enabled migration mode and installed commercial certificates on the IPA servers following the documented “ipa-server-certinstall –http” command. Now that the migration is complete, while not horrible, renewing the commercial certificates every year is a task that could be very disruptive if not completed on time. My question is it possible to revert to a self-signed web cert from the IPA CA so that Dogtag handles the renewals automatically?

 

Thanks!