25.2. Prerequisites for Using Vaults

To enable vaults, install the Key Recovery Authority (KRA) Certificate System component on one or more of the servers in your IdM domain:
# ipa-kra-install

Note

To make the Vault service highly available, install the KRA on two IdM servers or more.