10.6. Cloning TKS Subsystems
- Configure the master subsystem, and back up the keys.
- Create the clone subsystem instance using the
pkispawnutility.For examples of the configuration file required bypkispawnwhen cloning TKS subsystems, see theInstalling a KRA or TKS clonesection of the pkispawn(8) man page. - Restart the clone instance.
# systemctl restart pki-tomcatd@instance_name.service
For the TKS, enroll a smart card and then run an
ldapsearch to make sure that the same key information is contained in both databases.