10.10. Updating CA Clones

When a CA is cloned, any configuration in its CS.cfg is also copied to the clone CA. This includes any DRMs which are configured for the CA to use for key archival. However, if a DRM is configured for a master CA after a clone is created, then the new DRM configuration must be copied over to the clone CAs manually.
To update any clone CAs with new DRM configuration in the master CA:
  1. Stop the clone CA. 
    service instance_name stop
    Always stop a subsystem instance before editing its configuration files.
  2. Copy all of the ca.connecter.KRA.* parameters for the new DRM connection in the CS.cfg for the master CA over to the clone CA CS.cfg file.
  3. Restart the clone CA. 
    service instance_name restart