22.4. Reassigning Users to Default Groups
As mentioned in Section 22.3, “Importing the Data into the New CA”, members of the default groups are not restored during the data import.
Add members to the default groups manually, using the Certificate System Console or the
pki utility. For example:
- Set up the client:
# pki -c password client-init ------------------ Client initialized ------------------ # pk12util -i ~/.dogtag/instance_name/ca_admin_cert.p12 -d ~/.dogtag/nssdb/ Enter Password or Pin for "NSS Certificate DB": Enter password for PKCS12 file: pk12util: PKCS12 IMPORT SUCCESSFUL
- Add the
useraccount to theCertificate Manager Agents,Administrators, andSecurity Domain Administratorsgroups:# pki -n "PKI Administrator for example.com" -c password \ user-membership-add user_name "Certificate Manager Agents" # pki -n "PKI Administrator for example.com" -c password \ user-membership-add user "Administrators" # pki -n "PKI Administrator for example.com" -c password \ user-membership-add user "Security Domain Administrators"
