Bonjour,

When I run the command, I get this message
CA is not configured on this system
The ipa-cacert-manage command failed.

Thank you

Regards,

Frederic

Frédéric AYRAULT
Administrateur Systèmes et Réseaux
Laboratoire d'Informatique de l'Ecole polytechnique
fred@lix.polytechnique.fr

Le 09/10/2023 à 09:11, Mohammad Rizwan Yusuf a écrit :
Hello,

What procedure did you follow to renew your CA from external to self-signed.

Please look at the this doc https://www.freeipa.org/page/V4/CA_certificate_renewal#ca-certificate-management-utility

$ ipa-cacert-manage renew --self-signed
Above command should renew CA to self-signed


On Sun, Oct 8, 2023 at 5:40 PM Frederic Ayrault via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
Bonjour,

I need to replace our external CA to an Internal one.

We tried several ways without success. One of them was to do a backup with ipa-backup or db2bak
reinstall the serveur with an internal CA and restore the datas. But this also restore the external CA.

Is there a way to backup or restore only the users, groups, roles, ... ?

I am still running ipa 4.6.8 from Centos7

Thank you

Regards,

Frederic

Frédéric AYRAULT
Administrateur Systèmes et Réseaux
Laboratoire d'Informatique de l'Ecole polytechnique
fred@lix.polytechnique.fr

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue


--

--

Regards

Mohammad Rizwan

He/Him/His

IM: rizwan