IPA: How to renew "auditSigningCert cert-pki-ca", "ocspSigningCert cert-pki-ca", "subsystemCert cert-pki-ca" certificates in replica?

Solution Verified - Updated -

Issue

  • IPA: How to renew auditSigningCert cert-pki-ca, ocspSigningCert cert-pki-ca, subsystemCert cert-pki-ca certificates in replica?
  • Certificate's auditSigningCert cert-pki-ca, ocspSigningCert cert-pki-ca, subsystemCert cert-pki-ca has expired.
  • Certificate information is not present in IPA master and replica server in ldap under path cn=ipa,cn=etc,$SUFFIX
ldapsearch -h localhost -p 389 -D 'cn=Directory Manager' -W -b "cn=ipa,cn=etc,$SUFFIX"  -x -LLL

Environment

  • Red Hat Enterprise Linux 6
  • IPA 3

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.