2.4. Uninstalling an IdM Server

Note

At domain level 0, the procedure is different. See Section D.3.6, “Removing a Replica”.

Before uninstalling a server that serves as a certificate authority (CA), key recovery authority (KRA), or DNS Security Extensions (DNSSEC) server, make sure these services are running on another server in the domain.
Warning
Removing the last replica that serves as a CA, KRA, or DNSSEC server can seriously disrupt the Identity Management functionality.

To uninstall server.example.com:

On another server, use the ipa server-del command to delete server.example.com from the topology:
```
ipa server-del server.example.com
```
```
[root@another_server ~]# ipa server-del server.example.com
```
Copy to Clipboard Toggle word wrap
On server.example.com, use the ipa-server-install --uninstall command:
```
ipa-server-install --uninstall
```
```
[root@server ~]# ipa-server-install --uninstall
```
Copy to Clipboard Toggle word wrap
Make sure all name server (NS) DNS records pointing to server.example.com are deleted from your DNS zones. This applies regardless of whether you use integrated DNS managed by IdM or external DNS.