Hey Guys,

I want to use the IPA CA for PKI on some of our web services( mostly of premises - that's why )

What I do not know is:
1. How to add a profile id for certificate generation for the user so he/she can paste a CSR and get a  certificate.
2. How to turn on/off automatic signing. ( I would like to review the request before signing )
3. How can I export the IPA revocation list so it's compliant with servers (CRL format)
4. If this a bad idea?

Best regards

Maciej Drobniuch
Network Security Engineer