22.4. Reassigning Users to Default Groups

As mentioned in Section 22.3, “Importing the Data into the New CA”, members of the default groups are not restored during the data import.
Add members to the default groups manually, using the Certificate System Console or the pki utility. For example:
  1. Set up the client: 
    # pki -c password client-init
------------------
Client initialized
------------------
# pk12util -i ~/.dogtag/instance_name/ca_admin_cert.p12 -d ~/.dogtag/nssdb/
Enter Password or Pin for "NSS Certificate DB":
Enter password for PKCS12 file:
pk12util: PKCS12 IMPORT SUCCESSFUL
  2. Add the user account to the Certificate Manager Agents, Administrators, and Security Domain Administrators groups: 
    # pki -n "PKI Administrator for example.com" -c password \
     user-membership-add user_name "Certificate Manager Agents"

# pki -n "PKI Administrator for example.com" -c password \
     user-membership-add user "Administrators"

# pki -n "PKI Administrator for example.com" -c password \
     user-membership-add user "Security Domain Administrators"