Ian Pilcher via FreeIPA-users wrote:
On 01/29/2018 05:32 PM, Fraser Tweedale via FreeIPA-users wrote:
> Ideally you should generate the keys and create a CSR on the device.
> Then use IPA to issue certificates for the user.
Jumping in to this thread ... I know how to generate a keypair and CSR,
but I've never been able to figure out how to get FreeIPA to generate a
certificate from a CSR.
If there's documentation somewhere that I've missed in my many searches,
I'd appreciate a pointer.