[Freeipa-users] Question about External CA signing for Sub-CA or Lightweight CA in FreeIPA

Hi FreeIPA Team,

I’m currently working on a project where we plan to use FreeIPA, and more specifically it's PKI, and while analysing the available documentation I could not be completely sure if the current version supports having Sub-CAs or Lightweight CAs signed by an external CA. Can you please clarify this?

If not, do you have any plans to add this feature in future releases? And if so, do you have an idea when that version might be available?

Thanks for your help!

Best,

Nelson V.