I want to use the IPA CA for PKI on some of our web services( mostly of premises - that's why )
What I do not know is:
1. How to add a profile id for certificate generation for the user so he/she can paste a CSR and get a certificate.
2. How to turn on/off automatic signing. ( I would like to review the request before signing )
3. How can I export the IPA revocation list so it's compliant with servers (CRL format)
4. If this a bad idea?
Network Security Engineer